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Microsoft Hopes 7 
Is Lucky for Windows 

2010 ship date a gamble, given history 



BY DAVID WORTHINGTON 

Forecasting when the next ver- 
sion of Windows will come to 
market can be a real crapshoot. 
The five-year wait for Windows 
Vista — which was due in 2003 
but not completed until the end 
of 2006 — is an extreme exam- 
ple, but Microsoft's track record 
with its flagship operating sys- 
tem is something that is giving 
observers pause. 

Microsoft is seeking customer 
trust this time, as it disclosed a 
2010 release date for Windows 
7 — the successor to Windows 



Vista — at its Global Exchange 
sales conference in Orlando, 
Fla., in late July. 

Windows 7s release date was 
"announced" in an unorthodox 
way: with a well-coordinated leak 
to the media, instead of a formal 
statement. 

The next release will still offer 
32- and 64-bit versions, in busi- 
ness and consumer packages, 
according to Microsoft. 

Microsoft did not offer atten- 
dees any guidance on the expect- 
ed feature set or how many edi- 
continued on page 33 ► 



Intel Opens Up C++ 
Threading Library 

Threading Building Blocks 2.0 adds platforms 



BY ALEX HANDY 

Sometimes, opportunities are 
simply obvious. Intel, seeing a 
crying need for libraries that take 
full advantage of multicore 
processors, has created its first 
major open source project by 
releasing version 2.0 of Thread- 
ing Building Blocks, its C++ run- 
time library for the 21st Century. 
For Intel, this first foray into 
creating an open source devel- 
opment community around one 
of its libraries is also a trial bal- 
loon for possible open source 



projects in the future. 

James Reinders, software 
evangelist and director of soft- 
ware development products at 
Intel, said that when the com- 
mercial Threading Building 
Blocks 1.1 library was released 
last year, developers begged for a 
free version. In response, Intel 
launched www.threadingbuilding 
blocks.org. The new version of 
the library is licensed under 
GPLv2. 

"We have something [in 
Threading Building Blocks] that 



is very strongly regarded as a 
great way to extend C + + for 
parallelism, and we've been 
encouraged to push that as 
more of a standard. We looked 
at a lot of options, and open 
sourcing looked like the right 
way to do this. It's new for us," 
said Reinders. 

New to the 2.0 release is an 
expanded platform list. Previous- 
ly, Threading Building Blocks 
worked with Linux, Mac OS X 
and Windows; Intel has now 
continued on page 33 ► 



Java EE 6 Assuming Shape 

New version targets third-party add-ons, JSF 2.0, speed 



BY ALEX HANDY 

Broad brushstrokes have been 
applied to the canvas that will 
eventually become the Java EE 6 
specification. Those brush- 
strokes encapsulate plans to 
address the growing ecosystem 
of Java EE add-ons and compo- 
nents. 

Java EE 6, known as JSR 316, 
will include a number of other 
JSR specifications, including 
those for JavaServer Faces (JSF) 
2.0, the new JAX-RS for REST- 
ful Web services, and the JSR 
236-specified timer for applica- 
tion servers. Many of these com- 
ponent JSRs, however, will be 
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'We've seen over the years that 
there are a lot of third-party 
technologies that want to layer 
into the platform.' 

—Roberto Chinnici, senior staff engineer 
for Java EE at Sun Microsystems 







maturing alongside the Java EE 
6 specification, in the hope of a 
simultaneous release sometime 
late in 2008. 

Roberto Chinnici and Bill 
Shannon, both of Sun Microsys- 
tems, are leading the Java EE 6 
specification. Last month, the 



pair laid out the initial ground- 
work for the road ahead; at the 
forefront of that labor is the 
effort to build landing pads on 
top of the Java EE 5 skyscraper. 
With its underpinnings based 
on Java SE 6, Java EE 6 is 
planned to include a faster JVM 



and new profiling tools to help 
track down problems, even into 
the virtual machine. But with so 
many companies and developers 
building extensions to Java 
EE — such as Hibernate, Struts 
and Swing, as well as the count- 
less Web toolkits used in cooper- 
ation with JSF and JavaServer 
Pages (JSP) — Java EE is now in 
dire need of integration points 
that allow it to work with third- 
party extensions, rather than 
against them. 

Chinnici, senior staff engi- 
neer for Java EE, said that 
enabling extensibility could only 
help the platform as a whole. 
"We've seen over the years that 
there are a lot of third-party 
technologies that want to layer 
into the platform. In this version 
of the platform, we want to add 
continued on page 33 ► 



Architecting Eve 
Online Not a Task 
For Space Cadets 
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CodeGear Brings JBuilder Features to Any Eclipse 

JGear plug-ins tackle performance, team metrics and visual archeology 



BY ALEX HANDY 

CodeGear is looking to spread 
the benefits of its JBuilder IDE 
to all Eclipse-based platforms. 
Through the Aug. 20 issuance 
of a new line of commercial 
plug-ins that will run on any 
Eclipse 3.2-based IDE, Code- 
Gear hopes to spread its special 
sauces to the masses. The new 
JGear product line features 
three IDE-side plug-ins and a 
server-side integration engine 
at release. 

The first two products in the 
JGear line address performance 
tuning and code maintenance 
issues. JGear Performance 
offers developers the ability to 
perform thread debugging and 
to tune their applications from 
within Eclipse. JGear Live- 
Source, on the other hand, 
brings a visual editor into 
Eclipse to speed the creation of 
Enterprise JavaBeans and other 
complex application underpin- 
nings. 

Michael Swindell, Code- 
Gear's vice president of prod- 
ucts, said that JGear LiveSource 



is especially useful for 
developers who have 
inherited older codebases 
with unknown inner 
workings. "It makes doing 
things like developing 
and configuring server- 
based applications much 
easier because we've tak- 
en the complexity and 
put it into visual repre- 
sentation. It's a full two- 
way tool," said Swindell. 
"Other developers can 
just [edit] the source 
code generated. There 
are no markers being 
injected. Think of it as a 
RAD layer, on top of 
Java." 

The other two prod- 
ucts in the JGear line go 
hand in hand. JGear CodeGear has extended the functionality of Eclipse Mylyn to include requirements 
Team Server comes in management through XPIanner. 
the form of a server-side 
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integration package that brings 
together CVS, Subversion or 
XPIanner enterprise bug-track- 
ing systems and the Eclipse 
Mylyn project into a cohesive 
project management and moni- 



toring environment. JGear 
Team Client, meanwhile, in- 
cludes a Web portal for viewing 
the metrics and measurements 
gathered by JGear Team Server 
during daily operations. This 



information can also be viewed 
from within Eclipse and 
through Mylyn, giving man- 
agers a deep well of digits and 
statistics with which to evaluate 
their teams. 



The JGear client tools 
are based on CodeGear's 
Eclipse-based flagship 
IDE JBuilder 2007.2. The 
server-side tools come 
directly from CodeGear's 
internal development 
efforts. "Our general strat- 
egy with this is that 
JBuilder is a great IDE, 
and we're completely 
committed to JBuilder. 
But there's a lot of 
JBuilder functionality and 
advantages that we want 
to get into the hands of 
developers using any 
Eclipse-based platform," 
said Swindell. 

The JGear product line 
will work with any Eclipse 
3.2-based IDE, and Code- 
Gear hopes to have an 
Eclipse 3.3 version avail- 
able soon as well. JGear 
LiveSource and JGear Perfor- 
mance each cost US$299 per 
user, while JGear Team Client 
and JGear Team Server cost 
$399 per user and $599 per 
computer, respectively. I 



Merging Apps Is a Political Issue 

Internal team politics and pride can derail consolidation efforts 



BY ALEX HANDY 

With mergers and acquisitions 
as common as they are in 
today's economy, many enter- 
prise developers are finding 
themselves with too much code 
and not enough need. In such 
situations, the most common 
solution is to merge redundant 
applications into single cohe- 
sive wholes. But while this 
works well in theory, the poli- 
tics of inter-team development 
can make the reality of applica- 
tion merging appear to be a 
quagmire of congressional pro- 
portions. 

On a daily basis, merging 
code isn't nearly as volatile an 
experience. Often, developers 
find themselves working on 
code that's being tweaked 
somewhere else at the same 



time. Mark Shuttleworth, 
founder of the Ubuntu Linux 
distribution, claimed that sim- 
ple merges of this variety are 
no longer much of an issue, 
thanks to advanced reposito- 
ries such as Subversion and 
Bazaar. But for larger architec- 
tural merges, the repository is 
neither a potential solution nor 
a crutch. 

In fact, when it comes to 
merging two existing applica- 
tions into one, the real trouble 
tends to come from the devel- 
opers who have put their blood, 
sweat and tears into the pro- 
jects being melded together. 
Matt Peloquin, CTO of best- 
practices consulting company 
Construx Software, said that, 
for most teams, it's the politics 
of personal investment that 




'If it's a two-to-four-year time 
frame anyway, it might make sense 
to just build a new system. ' 

—Matt Peloquin, CTO of Construx Software 



causes much of the pain. 

"From my experience, poli- 
tics tends to loom largest. [It] 
can almost trump technical 
aspects," said Peloquin. "Soft- 
ware groups have built some- 
thing, they're proud of it, [and] 
they want to make sure their 
stuff takes priority. They may 
be protecting their jobs. Some- 
times, issues may be cloaked in 
necessity but may actually be 
political turf wars." 

Peloquin said that, in his 
experience, no one ever suc- 
cessfully builds a 50-50 hybrid 
of two working systems. In the 
end, he explained, typically 
one system encapsulates 
another, with outputs being 
translated for the "winning" 
system and the underlying 
code of the consumed system 
being left entirely alone. If 
that's not the case, then the 
only other reasonable option 
he sees is for development 
teams to merge temporarily, 
while working to build an 
entirely new system that will 
replace both of the legacy pro- 



jects. "If it's a two-to-four-year 
time frame anyway, it might 
make sense to just build a new 
system that replaces both of 
them. You live with the 
Frankenstein for a while, and 
eventually replace it with a 
whole new system," said Pelo- 
quin. 

ONE LEADER, ONE VIEW 

For Bill Roth, vice president of 
the workshop products unit at 
BEA Systems, total dictator- 
ship solves the headaches of 
political in-fighting during 
project merges. Roth's group 
recently completed a merge of 
two of its IDEs into one, and 
he explained that the secret to 
his success was the appoint- 
ment of a single senior devel- 
oper to make all of the integra- 
tion decisions. 

"Pick one leader," said Roth, 
"one person with the vision." 
That person, he added, was 
"the final arbiter... our devel- 
opment choice god. They had 
the iron fist, and I would 
enforce everything they said. 




Total dictatorship puts an end to 
in-fighting r says BEA's Roth. 

Consistency is something you 
want, because it leads to better 
usability." 

Roth explained, "If there's 
one clear view, it's that you 
can't design by committee. I 
had one technical leader, and 
one user interface leader. The 
technical leader was someone 
very senior. My user interface 
person was not very senior, but 
he was good, and I supported 
his decisions. It doesn't matter 
whether the person is right or 
wrong; it matters that they 
have a consistent view. Of 
course, if someone does some- 
thing insanely wrong, you want 
continued on page 30 ► 
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Solix Technologies, a Sunnyvale, Calif.-based provider of enterprise 
data management solutions for information life-cycle management, 
announced the availability of Solix Secure Test and Development 
Solution for SAP. Solix has partnered with network data storage tool 
— , — i j—- - * V y- provider Network Appliance to combine 
Wm O Kj L I f\ Solix's data masking and subsetting 
capabilities with NetApp's replication 
and cloning technology in order to reduce data storage costs and 
cloning times . . . Microsoft has released the Beta 3 version of the 
Windows Server 2008 Developer Training Kit, which includes a set 
of labs and presentations for technologies such as Internet Informa- 
tion Services 7, Windows Communication Foundation, Windows Work- 
flow Foundation, Windows CardSpace, Windows PowerShell and the 
Transactional File System. The kit is intended to show developers how 
to build applications that target Windows Server 2008 technologies, 
and can be installed on Windows Vista, XP and Windows Server 2003 
. . . BMC Software has announced an open source developer site called 
the BMC Developer Network, with the goal of fostering interaction 
and real-time technical collaboration between developers and cus- 
tomers. The BMCDN offers resources that are supposed to simplify 
development, with answers to technical questions, toolkits, 
templates and code samples, documentation and best practices 
. . . Unify has announced the availability of its Composer for Lotus 

Notes, designed to enable the seamless ■ 

migration of both custom and template Notes l (J N I F Y I 
applications to the Microsoft Office System. 
Notes applications are broken down by Composer, with business logic, 
data, security configuration and user interface each reassembled in 
the appropriate Microsoft application or service . . . NASA's Jet 
Propulsion Laboratory has released the first beta of its Coupled Lay- 
er Architecture for Robotic Autonomy (CLARAty), an integrated 
framework for reusable robotic software. JPL 
has released 44 core CLARAty modules cov- 
ering primary functionality, representing 30 
percent of the generic modules planned for eventual release . . . Con- 
notate has released its Information Agent Community GEN2.0 suite, 
designed to help businesses create a Web 2.0-based information 
ecosystem from both external and internal sources by providing a plat- 
form for the creation and sharing of Information Agents and the con- 
figuring of on-demand applications . . . AOL has announced the avail- 
ability of the Open Xdrive API, which allows consumers to upload, 
organize and share a range of filetypes from j^ 
any Web site. Open Xdrive features a JSON Xdriue" 



t I \W\\y 



(JavaScript Object Notation) interface that 
allows access by both desktop and Web applications . . . BitTorrent 
has released an SDK aimed at consumer electronics devices such as 
digital media adapters, set-top boxes and other network storage 
devices. The company also announced a device certification program 
to verify compatibility between BitTorrent services and underpinning 
hardware . . . Trend Micro, a provider of content security software and 
services, has released SecureCloud, a software-as-a-service security 
platform that offers threat protection tools for businesses of all sizes. 
The platform offers a security policy that can 
WA TREND be managed from a single Web console, pro- 
tection against threats across e-mail and anti- 
malware, and services that deliver security throughout the application 
life cycle . . . Neurotechnologija has introduced its SentiSight SDK, 
with the aim of easing the development of robotic and computer 
vision-based systems for both 2D and 3D applications. The Lithuanian 
company claims that SentiSight works with a broad range of digital 
cameras, including Webcams, by learning object properties, and then 
uses a proprietary algorithm to compare new images to the stored 
items, at a rate of up to 20fps. 



UPGRADES 
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AVIcode, 


a provider of 


.NET application 


monitoring 


solutions, has 


released 


version 4.1 of its 


.NET Management Pack 


for Microsoft 










continued 


on page 26 ► 



Adding Mashups 
To the Campfire 

Twenty-three-year-old takes first prize 
at 'Mashup Camp' for the second time 



BY JEFF FEINMAN 

It's summer, and time to sit 
around a campfire and mash 
together marshmallows, choco- 
late and graham crackers into 
that delectable treat known as 
"s'mores." In July, developers 
had the opportunity to head off 
to camp and create treats of their 
own during "Mashup Camp." 

The event in Mountain 
View, Calif., was produced by 
Mass Events Labs, and was 
sponsored by companies such 
as Google, IBM, Intel, Kapow 
and Salesforce.com. More than 
200 developers participated, 
creating mashups based on 
APIs and feeds from content 
providers, and competing over 
business applicability, creativity 
and innovation. 

The presence of so many 
industry names signals that 
"the mashup ecosystem is 
beginning to come out of its 
embryonic state and become 
more mainstream," said David 
Berlind, co-organizer of this 
year's Mashup Camp, the 
fourth such event. He added 
that the presence of recruiters 
looking for mashup developers 
was another sign of maturity, as 
enterprises begin to experi- 
ment with the technology on 
their Web sites and internal 
departments. 

The first Mashup Camp 
took place in February 2006, 
at the Computer History 
Museum in Mountain View. 
Berlind said that he and other 
developers came up with the 
idea while talking to one 
another at IDG World Expo in 
December 2005. He explained 
that the goal of Mashup Camp 
was to provide an industry 
event that wasn't vendor- 
specific or technical in nature, 
and didn't cost a fortune for 
developers to attend. 

CAPTURING THE FLAG 

Taking first prize this year was 
23-year-old Taylor McKnight, a 
Gainesville, Fla.-based devel- 
oper who is co-creator of 
Chime. TV, a video conglomera- 
tion that is fed by 10 Internet 
video sites. McKnight, who 




Taylor McKnight, seen here in Paris, has reason to jump after his video 
conglomeration, fed by 10 Web sites, won first prize in July. 



calls himself "mostly" a Web 
designer, is a former student at 
the University of Florida who 
worked for the university's Web 
administration office before a 
stint at Gawker Media as a user 
interface designer and HTML 
coder. 

But this isn't the first time 
McKnight has taken home a 
trophy; he was the winner of 
the very first Mashup Camp 
competition in February 2006 
with podbop.org, which took 
event and concert data and 
mashed it with a database of 
MP3s. 

Mashups should be built 
upon other entities, McKnight 
said, rather than be something 
created from scratch. The idea 
is that a mashup should be 
geared toward "building some- 
thing useful rather than want- 
ing to own something." 

According to McKnight, 
"Chime. TV is successful so far. . . 
because instead of starting our 
own video site, having people 
upload videos and trying to build 
a whole community, which 
would take years and millions of 
dollars, we build upon the estab- 
lished networks. Leveraging 
networks that are already creat- 
ed, instead of trying to create 
your own, is what's important." 

McKnight put together 10 of 
what he claimed are the most 
popular video sites on the Web 
with Flash: blip.tv, Break.com, 
DailyMotion, Google Videos, 
Guba, Kewego, MetaCafe, 
MySpace, Veoh.com and 
YouTube. Videos are pulled 



either with the video provider's 
API, or via a Media RSS feed. 

Chime. TV was started in 
January 2007 as a substitute 
for regular television, providing 
Web videos with 23 premium 
channels separated by cate- 
gories, including documen- 
taries, music videos and science. 

"I love Web videos... but 
spending five minutes between 
each video finding a good clip 
can be really annoying," Mc- 
Knight said. "I didn't find that 
the comments and things like 
that were really adding to the 
experience." 

Mashup Camp provides 
McKnight with the opportunity 
to converse with other mashup 
developers and talk about the 
philosophy behind mashups. 
He explained that many of the 
sessions and talks shared the 
idea that mashing up existing 
free services instead of creating 
original ones is a viable option. 
Developers also took part in 
"speed geeking," which had 
groups of people switching 
tables every five minutes to 
view demos, in a mashup ver- 
sion of speed dating. 

"It's cool to hear what other 
developers are thinking," said 
McKnight. "There's not a huge 
tech community in Gainesville, 
so being able to keep in touch 
with people between camps is 
nice." 

Mashup Camp is moving to 
Europe next, and will take place 
at Dublin's Trinity College from 
Sept. 10-14. More details are 
available at mashupcamp.com. I 
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JavaScript Creator Expands Predictions for 2.0 



BY ALEX HANDY 

JavaScript 2.0 won't be part of 
the religious wars that plague 
programming languages. That 
was the message at the AJAX 
Experience convention in San 
Francisco on July 25, where 



Brendan Eich, CTO of Mozilla 
and the creator of JavaScript, 
said that version 2.0 of the lan- 
guage won't take sides in the 
age-old battles between strong- 
ly typed and weakly typed lan- 
guages, and between static and 



dynamic languages. To Eich, 
all of these practices and func- 
tionalities have their benefits. 

As the keynote speaker at 
the AJAX Experience, Eich 
spent almost an hour detailing 
the changes and plans on the 



docket for the next JavaScript 
version, now officially known as 
ECMAScript 2.0, after the 
Ecma International standards 
body in which it is being devel- 
oped. Eich explained that this 
new version of the language 
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will also be developed in the 
open, with periodic beta code 
drops being made available at 
www.ecmascript-lang.org. 

Eich detailed some of the 
major changes he plans to make 
to JavaScript. These include the 
addition of support for byte 
arrays, tuples and vectors; the 
proposed changes also extend 
to the evolution of the lan- 
guage's type system. Eich said 
his goal is to improve Java- 
Script's object orientation, and 
that adding arrays and vectors 
will help to push the language 
in this direction. 

"I'm an old kernel hacker," 
said Eich, "so I use C, still. I'm 
not a dynamic-only or static- 
only person. I think there are 
trade-offs. The Web is too big 
for only one language." 

On the subject of type safety, 
Eich said that there is no clear 
winner between weakly and 
strongly typed languages. When 
it comes to type systems, said 
Eich, "there's so many weak stat- 
ic ones which slap you when you 
do something silly. We believe 
untyped objects will be around 
forever." Eich attempted to com- 
fort his audience of Web pro- 
grammers by noting that he was 
not intending to make JavaScript 
behave like Java, in this regard. 

"We're not saying no' to 
classes, [instead] we're doing 
them in a way where they're 
buttoned-down. These things 
already exist. The DOM [Docu- 
ment Object Model] is full of 
nominal types. We're formaliz- 
ing that in the language," said 
Eich. 

Eich predicted the rise of 
typed APIs, including structural 
types, which he said "will 
emerge, allowing people to 
enforce certain conditions on the 
parameters, or on the return. 
The most common use case will 
be untyped code, calling typed 
APIs. The type system will only 
prevent programs from reaching 
runtime; it won't make them 
behave differently when they get 
to runtime. This is not C# or 
Python." 

In addition, Eich wants to 
add program units and dictio- 
naries to the language, hoping 
to make code easier to main- 
tain, read and write. Eich was 
unable to peg down a timeline 
for all of these changes, but 
anticipates that buildable beta 
releases of the language envi- 
ronment would begin to appear 
by the middle of 2008. I 
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Downtime Keeps IT Pros Up at Night 

IT operations managers cite application changes as their top concern 



BY DAVID WORTHINGTON 

Costs quickly mount when 
multitier applications fail in 
valuable production environ- 
ments, making it no small won- 
der that minimizing downtime 
caused by application changes is 
the top concern among IT oper- 
ations professionals, according 
to a July 2007 report published 
by S tackS afe, a startup that pro- 
vides a virtualized staging and 
analysis platform. 

COMPANY SIZE A FACTOR 

Downtime ranked as the top IT 
operations challenge among 
companies of all sizes surveyed; 
smaller enterprises with a mini- 
mum of 750 employees report- 
ed fewer incidents of downtime 
than medium and large enter- 
prises. IT professionals from 
large enterprises reported the 
most significant cost in staff 
hours: 3,184 per year, com- 
pared with 2,115 hours for the 
average company. 

Six in 10 respondents cited 
application changes, such as soft- 
ware patches, new releases and 
custom code, as the primary 
source of downtime. Connectivi- 
ty problems and hardware fail- 
ure were less problematic, rated 
21 percent and 16 percent, 
respectively. Emergency patches 
and fixes were the specific appli- 
cation change causing the most 
problems for organizations. 

Computer-related, e-com- 
merce and pharmaceutical firms 
experienced more incidents of 
downtime. Companies identify- 
ing e-commerce as their primary 
business and organizations pri- 
oritizing CRM both noted 
downtime as their top concern. 

The report draws a strong 
correlation between the number 
of application changes compa- 
nies make, and the incidents of 
downtime in those organizations. 
Companies that implement 
more than 150 application 
changes per year experienced an 
average of 22.3 incidents of 
downtime per year at a cost of 
3,086 IT staff hours, while the 
average company has 15 inci- 
dents at a cost of 2,115 hours. 

Stacksafe president and 
CEO Loren Burnett explained 
that the top concerns of IT oper- 
ations are misaligned with how 
budgets are allocated. Security 
was the highest IT expenditure 
driver, followed by minimizing 



downtime, troubleshooting and 
managing performance. 

StackSafe commissioned 
market research service Re- 



search Edge to conduct the sur- 
vey. Research Edge used a tar- 
geted random sample of 400 IT 
professionals from a panel 



assembled by research provider 
Greenfield Online; only IT 
decision makers from compa- 
nies with greater than 750 



employees were qualified for 
the survey. Statistical analysis 
was used to establish the validi- 
ty of the study and its results. I 
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Microsoft Builds a CRM Marketplace of Its Own 



BY DAVID WORTHINGTON 

Microsoft is taking a page out of 
the Salesforce.com playbook, 
by building a partner ecosystem 
around its Dynamics customer 
relationship management plat- 



form, in a manner reminiscent 
of Salesforce's AppExchange 
service. 

Next year, Microsoft will cut 
the ribbon for an online appli- 
cation marketplace where its 



partners can showcase applica- 
tions and templates that add 
functionality to Dynamics. 
Partners' products will be inte- 
grated directly into Microsoft's 
upcoming Dynamics Live CRM 



Web service and Microsoft 
Dynamics on-premise software. 
In his keynote at July's 
Microsoft Worldwide Partner 
Conference, Brad Wilson, gen- 
eral manager of customer rela- 
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tionship management at 
Microsoft, said that the goal of 
the as-yet-unnamed market- 
place was to help partners reach 
a broader audience, but recog- 
nized that it would be in compe- 
tition with AppExchange. 

Christian Pederson, senior 
director for Microsoft Dynam- 
ics, explained that Microsoft 
has been working with more 
than 500 partners to build verti- 
cal applications since Novem- 
ber, and that the marketplace is 
an extension of that work. 

"We want to provide the plat- 
form to build additional func- 
tionality and focused vertical 
solutions," he noted. "We are 
giving customers the choice to 
deploy on-premise or in a hosted 
manner. [For partners,] the 
development tools are identical." 

Pederson said that it was 
conceivable that other Dynam- 
ics family members could lever- 
age the marketplace. 

Microsoft Dynamics Live 
CRM will offer full-suite CRM 
through Microsoft Outlook and 
Web browser clients, and work- 
flow capabilities via the Win- 
dows Workflow Foundation. 
Workflows move across the 
boundaries of different 
Microsoft products, lifting the 
reins on developers to build 
integrated solutions. 

An early access program for 
Live CRM will begin this quar- 
ter and run through 2007. 
Microsoft will not charge for 
usage during the early access 
period, but will do so when the 
service goes live. The produc- 
tion service will follow and go 
live in 2008, but Pederson 
would not share any specific 
timing. I 
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AquaLogic BPM Workspace is a new thin-client browser-based modeling environment. 

Fighting Business Unit 
Anarchy From Inside 

BEA integrates AquaLogic BPM 6 with ESB 



BY DAVID WORTHINGTON 

From a CIO's perspective, any IT sys- 
tem initiated by a business unit is a 
rogue deployment, and none more so 
than in the case of business process 
management. While individual deploy- 
ments can be tactically useful, there 
could just as easily be a conflict between 
the BPM system and the governance 
policies the CIO is required to follow 
and implement. 

Spotting an opportunity to offer a 
"OO-friendly" product, BEA Systems 
on July 30 released AquaLogic BPM 6, 
which can register business processes 
as services within any standards-com- 
pliant enterprise service bus or service 
registry. It includes prebuilt integra- 
tion with the company's AquaLogic 
Service Bus and AquaLogic Service 
Registry, which applies governance and 
orchestration to process services, align- 
ing BPM with policy. AquaLogic BPM 
supports event-initiated, system or 
user processes. 

In this release, BEA has replaced 
the existing AquaLogic BPM front end 
with an AJAX-powered client for busi- 
ness users, which allows them to col- 
laborate and define rules. A new capa- 
bility dubbed Workspace Extensions 
allows end users to employ their tool of 
choice to engage with process activities 
and enterprise portals, process work- 
spaces, e-mail clients or RSS readers. 

The company has also swapped its 
IDE for Eclipse-based tooling, as with 
all of its product lines. 

Users can now implement dynamic 
business rules in this release. Domain 
experts can change business rules 
within a process in a production sys- 
tem, instead of waiting for the next 
rules cycle. While it is possible to 



work with subprocesses, AquaLogic 
BPM mainly targets simple rules sce- 
narios. 

Jesper Joergensen, director of prod- 
uct marketing at BEA, explained that 
BEA is not getting into the rules engine 
market. Instead, future releases of 
AquaLogic will make it easier to inte- 
grate with third-party rules engines, 
and will support a common rules repos- 
itory to makes rules discoverable across 
systems. 

Joergensen stressed that people are 
a key component of BPM systems, so 
to that end, BEA has included new 
resources for decision activities and 
more workspace options. These in- 
clude a facility that captures past deci- 
sions and actions, process simulation 
testing, and real-time reporting of 
quantitative data. Joergensen ex- 
plained that proven decisions act as 
guidance to help create smarter 
processes. 

If those features sound familiar, it is 
because they are business intelligence 
functions. Joergensen noted that while 
BEA has good relations with BI ven- 
dors, there is a future opportunity for 
the company to produce a BI product 
that leverages the operational intelli- 
gence collected by AquaLogic BPM. 
Ultimately, noted Joergensen, cus- 
tomers are articulating the require- 
ments. 

The AquaLogic BPM update imple- 
ments a variety of standards, including 
Business Process Modeling Notation, 
XML Process Definition Language and 
Business Process Execution Language. 
It does not support BPEL4People — a 
proposed extension to BPEL that 
accounts for human interaction pat- 
terns — at this time. I 
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IBM Promises Patents 
No Threat to SOA Standards 



BY ALEX HANDY 

IBM has exposed an increasing number 
of its patents to the open source com- 
munity since 2005. In that year, the 
company issued a promise not to sue 
over a set of patents that lingered 
around the Linux kernel. In July, howev- 
er, the company made its largest patent 
promise yet, one so massive the compa- 
ny didn't even bother to release a list of 
the more than 40,000 patents involved. 

Almost all of those patents are relat- 
ed to SOA or Web 2.0 standards, such as 
HTML, SAML and other markup lan- 
guages. IBM has pledged that it will not 
instigate litigation against any developer, 
commercial or otherwise, that imple- 
ments any of the 150 standards relating 
to these patents. IBM's promise, howev- 



er, will be void, if litigation involving 
these standards is instigated against any- 
body or any entity implementing these 
standards. The idea, said Bob Sutor, 
IBM's vice president of open source and 
standards, is to halt litigation potential 
on all sides, in a manner akin to nuclear 
brinksmanship in the era of mutually 
assured destruction. 

Sutor said that IBM's portfolio sim- 
ply held too many patents relating to 
SOA and Web 2.0 to list them out for 
developers. "What we're doing is giv- 
ing people a blanket statement that 
says, 'Don't worry about how many 
[patents], don't worry if you think they 
might apply [to your work].' We tried 
to make this as simple, yet as broad, as 
possible," said Sutor. I 



IBM Folds AppScan Into Rational 



BY JEFF FEINMAN 

IBM has added some fire to its 
application security grill with the July 
completion of its purchase of Waltham, 
Mass. -based Watchfire. The former 
company was perhaps best known for 
its Web application security tool, now 
offered as IBM Rational AppScan. 
IBM will integrate its Rational soft- 
ware quality management tools with 
Watchfire's security and compliance 
testing services. 

Company officials explained that 
Watchfire also complements IBM 
Tivoli access, identity and compliance 
management software offerings as well 
as the work of IBM Internet Security 
Systems, by extending security and 
compliance testing as an integrated 
element of the application develop- 
ment life cycle. 

"Watchfire's technology will help 
our customers address online security 
and compliance management re- 



in 



the software 
-before their 
said Danny 
manager of IBM 



quirements early 
development process 
applications go live, 
Sabbah, general 
Rational. 

Dave Locke, director of offerings 
marketing with IBM, gave an example 
of future integration, where AppScan 
test results might be automatically 
reported into Rational ClearQuest, 
IBM's tool for managing enhancement 
requests and defects. 

Locke said that although there are 
very few concrete plans on the table 
right now, the company would like 
to add integration capabilities with 
the Rational RequisitePro re- 
quirements manager, which will be 
refitted to incorporate accessibility and 
security requirements supported in 
AppScan. 

Locke confirmed that the Watchfire 
brand will be retired. The terms of 
IBM's acquisition were not disclosed. I 



COLDFUSION 8: FIRST UPDATE IN TWO YEARS 



BY JEFF FEINMAN 

Adobe Systems is offering a way for 
developers to cool down with the July 
30 announcement of the general avail- 
ability of ColdFusion 8, a tool for build- 
ing dynamic Web sites and Internet 
applications. It is the first update of the 
tool in two years. 

ColdFusion 8 Server Monitor, a new 
addition, lets developers identify bottle- 
necks and have a sense of memory usage 
and database query caching. The new 
monitoring capabilities allow developers 
to identify slow requests and which 
objects within a page are performing 
poorly. 

ColdFusion's self-titled markup lan- 
guage has been tweaked in order to be 



more in line with current Web develop- 
ment needs. "With a 12-year-old prod- 
uct, we want to make sure the language 
continues to meet the needs of develop- 
ers," said Tim Buntel, senior product 
marketing manager for ColdFusion. 

ColdFusion 8 allows developers to 
integrate ColdFusion applications with 
other Adobe technologies such as Flex, 
PDF, Adobe Integrated Runtime and 
Adobe LiveCycle. The new version sup- 
ports .NET, Windows Vista and JBoss 
integration. It also uses AJAX-based 
components to design and deploy appli- 
cations. 

Adobe officials said that since May, 
more than 14,000 developers have partic- 
ipated in the ColdFusion 8 public beta. I 
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Without CONNX, you are required to write a custom application to access legacy 
and/or relational data, which is . . . 

► Limited to only that application. 

► Dependent on the creation of custom reports in order for the data to be 
accessible to the end user. 

► Costly and time consuming to write and maintain. 
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Uses a single metadata model that spans virtually all your legacy and relational 
enterprise data sources. 

Offers SQL access to all your legacy and relational data sources via ODBC, 
OLE DB, JDBC and .NET. 

Includes InfoNaut, a desktop/query reporting tool, which allows the end user to 
instantly view data and create their own reports, increasing IT productivity. 
Can be used with virtually any tool that is compatible with the APIs listed above. 






CONNX is... 

r REALTIME 

Access data directly from transaction databases and multiple disparate databases 
while preserving data integrity. 

► ROBUST 
CONNX takes advantage of resources on both the backend host and the 
middleware server or client PC. 

► SCALABLE 
The CONNX distributed SQL engine design enables unmatched performance 
from the single project to enterprise initiatives. 

► SECURE 
CONNX respects all existing database security and provides additional user 
group, row, field, table and database security. 

► A MONEY AND TIME SAVER 
CONNX significantly reduces the time required to generate ad hoc reports. 
Clients report saving as much as $10,000 per report per month. 

^ EASY TO INSTALL AND FAST TO LEARN 

Installation and use of CONNX is made easy through the user- friendly CONNX 
Data Dictionary GUI and the InfoNaut SQL Query Builder. 

The full CONNX Solutions product line will empower you with data access, data integration, 
ad hoc reporting, web enablement and change data capture tools. ^^ 

To see CONNX in action, take a test drive at www.connx.com/action. ^nlivH (\r\ or 
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New Tricks for Sybase ASE Platform 



BY P.J. CONNOLLY 

Sybase released an update to its 
flagship Adaptive Server Enter- 
prise (ASE) database platform 
on July 23, with what the com- 
pany called enhancements to 
data protection and manage- 



ability New statistical and XML 
table functions are expected to 
make it easier to access and use 
data, while extra security func- 
tions were designed to make 
misuse more difficult. 

Although a 15.0.2 release 



may sound like it's not much, 
this is only the second revision 
since ASE 15 shipped in 2005. 
According to the company, the 
seemingly minor revision num- 
ber has less to do with the 
number of new features, and 



more with the amount of disrup- 
tion customers can expect when 
implementing this release. 

ASE 15.0.2 offers additional 
encryption functionality by 
adding checks against rogue 
administrators, while key recov- 
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ery is now available through the 
use of secure yet retrievable 
key copies. 

The new release allows the 
encryption of more datatypes, 
and users without decrypt per- 
missions can be fed selected 
default data. This last feature is 
expected to be particularly 
useful in testing scenarios, and 
in addressing the increasing 
concerns over the mishandling 
of data. 

The new ASE release also 
provides T-SQL user-defined 
functions, attempting to im- 
prove productivity by allowing 
application developers to write 
functions in SQL and add them 
to stored procedures. 

Developers can also make 
use of a new function that 
extracts multivalued elements 
from an XML document and 
assembles a SQL table from 
them. This allows applications 
to make a single call to the new 
XML table [or... xmltableQ] 
function, instead of a T-SQL 
loop that repeatedly calls to 
ASE's XML extract [or... 
xmlextract()] function. 

ASE 15.0.2 includes new 
"instead of triggers that allow 
the updating of all views, 
including those that could oth- 
erwise be updated. These are 
special stored procedures that 
perform user-defined actions, 
overriding a triggering state- 
ment's default action. 

Developers wishing to com- 
pute variance or standard devi- 
ation from numeric data have a 
new range of statistical aggre- 
gate functions to choose from 
in this release, as well as aliases 
for common functions. These 
can calculate standard deviation 
and variance for a sample, or 
for the entire population. 

The ASE update will be par- 
ticularly useful for many users in 
the Far East, as it includes case- 
insensitive dictionary sort orders 
for Chinese and Japanese char- 
acter sets, including EUC-GB, 
GB-18030 and CP936 on the 
one hand, and EUCJIS, SJIS and 
DECKANJI on the other. 

Also new in this release is 
the ability to treat database 
archive dumps as if they were 
read-only online databases, for 
backup validation or selective 
recovery. Sybase claims this is 
more efficient in terms of disk 
space as well as time. Archive 
databases can also be loaded 
with transaction logs, for verify- 
ing a restore operation. I 
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Eve Online Game Brings Business to Pleasure 

Space cowboys in online game galaxy build dynamic corporations 



BY ALEX HANDY 

Massively multiplayer online 
role-playing games allow play- 
ers to escape into a reality 
where death and taxes don't 
really matter. But the lessons 
learned, both in development 
and in the actions of players, 
could have far-reaching impli- 
cations for software and how it 
is used in large businesses. 

Thanks to games such as Lord 
of the Rings Online and World of 
Warcraft, entire virtual econ- 
omies have sprung up around 
what are essentially 3D client/ 
server applications. But one 
game doesn't just dabble in creat- 
ing an economy for its users. As 
massively multiplayer online role 
playing games (MMORPGs) 
go, few can compare to Eve 
Online, a game that is so com- 
plex, it features its own stock 
market. With as many as 20,000 
users signed into the game at a 
single time, Eve Online behaves 
less like a videogame and more 
like an enterprise-level financial 
application. 

Eve is a space game, so play- 
ers buy space ships, then take 
them out into the universe to 
fight pirates, trade cargo and 
build corporations along the 
way. Rather than growing 
stronger through combat, as in 
most MMORPGs, players in 
Eve Online score points by fly- 
ing around the galaxy, trading 
commodities and creating 
intrigue. The basis of inter- 
player collaboration in Eve is 
not the preindustrial clan, but 
the corporation. Players form 
dynamic corporations that 
struggle to control trade routes 
and earn the game's currency, 
Interstellar Kredits. These cor- 
porations are even issued stock, 
and players can structure them 
like real businesses. 

Sound like fun? Well, sur- 
prisingly, it is. With thousands 
of subscribers and a dedicated 
core of players, Eve Online 
has shown steady subscriber 
growth over its three-year his- 
tory. Typically, user counts for 
MMORPGs grow dramatically 
in the first months of play, then 
slowly dwindle as the game 
remains static and players vanish 
in favor of newer games. But 
Eve has built up its following 
through viral marketing and 
word of mouth, instead of full- 
page ads and TV commercials. 




Players can contribute to large fleets, even if they're a newbie with a small fighter. 



The Icelandic company behind 
Eve, CCP, prepared for this 
growth by adopting develop- 
ment processes that are unlike 
those of most game companies. 
For starters, CCP hired IBM to 
help design and flesh out the 
game's architecture before cod- 
ing began. 

SINGLE-SHARD APPROACH 

Fortunately for CCP, IBM has 
an entire department dedicated 
to online gaming. David Laux, 
global executive for games and 
interactive entertainment at 
IBM, has worked with Eve from 
the start of the project in 2003. 
He explained that the biggest 
difference between Eve and 
other online games is the single- 
server architecture. Eve runs on 
only one server, unlike other 
online MMORPGs that use 
multiple servers with 
roughly 1,000 users 
apiece. 

"They're [CCP] 
unique," Laux said, "in 
that they've gotten 
people from tradition- 
al industries and 
brought those skills 
together." The differ- 
ences between Eve 
and other games, he 
noted, start "at a more 
basic architectural lev- 
el, when you look at 
the ability to collabo- 
rate and communicate 
with everyone online 
simultaneously. The 
single-shard approach 

that Eve has taken is With so many vicious player-controlled pirates out in space, the real danger is in 
really, at a basic level, other players, not computer-controlled opponents. 



more applicable to the enter- 
prise model." 

CCP used technology from 
many different sources to build 
Eve. Erlendur S Thorsteinsson, 
software director for Eve 
Online, said that one of the most 
important tools for his team 
isn't an IDE or a testing tool — 
it's a certain slithering scripting 
language. 

"The most important tool is 
probably Stackless Python, the 
programming language on 
which Eve is built. The choice 
of Python versus C++ might 
seem strange at first sight, since 
Python code is often five to 10 
times slower than equivalent 
C++ code," said Thorsteinsson. 
"But the Python code is also 
five to 10 times shorter, and 
anecdotal evidence suggests 
that one Python programmer 



can finish in two months 
what two C + + program- 
mers can't complete in a 
year. Given our strict 
release schedule of two 
major expansions every 
year, with minor expan- 
sions on a regular basis 
and various updates in 
between, it is extremely 
important that the main 
programming language 
support easy and rapid 
development." 

Python isn't the only 
language used in Eve, 
but it is the most impor- 
tant, Thorsteinsson not- 
ed. "Python is the glue. 
Some core components 
need to be in C++, such 
as Trinity — the graphics 
engine — and other CPU-hungry 
components, but those compo- 
nents are linked to the rest of 
the system using Python, and 
the gameplay is all implemented 
in Python. We don't use XML 
internally in the client/server 
communication nor as data stor- 
age," said Thorsteinsson. "There 
are some isolated systems that 
could possibly benefit from 
using XML, but we are not plan- 
ning any massive use. Eve is very 
much data-driven; the database 
is the pillar from which every- 
thing flows. So there is a lot of 
SQL in Eve, but no XML. The 
API we released in [the free 
expansion pack] Revelations II is 
a different story; to facilitate its 
use by third parties, we used 
XML." 

IBM's Laux said that corpora- 
tions could learn much from 




games such as Eve Online, 
though not all of them are strict- 
ly development-related. 

"[If you] look at a virtual 
world where we have a number 
of different players, those are 
great areas where we can take a 
scenario where we have a 
defined problem, but there is no 
right or wrong answer. We can 
program in the problem, and let 
the collaborative group solve the 
problem. A lot of times we find 
the answers are ones that have 
never been anticipated, and 
sometimes they're better than 
the best practices you've docu- 
mented," said Laux. 

"The skills learned in [a mas- 
sively multiplayer online game] 
are directly applicable to busi- 
ness and decision-making," Laux 
continued. "You have informal 
teams coming together for a 
common goal, and that relation- 
ship exists as long as there is 
mutual value. When the goal is 
resolved, so [are] the relation- 
ships." Laux also pointed to a 
recent IBM study that suggests 
the snap decisions made by 
gamers are inherently better 
than in-committee decisions 
made over time. After all, he 
said, it's easier to adjust to small 
problems along the way than to 
lose out altogether because of a 
lack of decision. 

TO 2010...AND BEYOND 

Eve has much in common with 
corporate applications. For one 
thing, Eve is a long-term pro- 
ject, as are many enterprise 
applications. The game has been 
designed to last for many years, 
and is already fully planned until 
2010. Additionally, CCP has 
opened its own APIs for devel- 
opers to interact with the game 
world through desktop and Web 
applications, something that is 
virtually unheard of in the 
videogame world. 

"Eve Online will see some of 
the most dramatic additions to 
date in the next two years," said 
Thorsteinsson. "For instance, 
we are working full-force on an 
expansion where players will be 
able to leave the confines of 
their cockpit and mingle with 
other players within the space 
stations, using lifelike character 
technology." Ironically, this sort 
of interaction is the one thing 
that every other MMORPG 
already has. I 
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WebMethods Emerges From Merger 

Software AG reveals plans to integrate the two product lines quickly 



BY DAVID WORTHINGTON 

Software AG, which acquired 
WebMethods in May, is taking a 
best-of-both-worlds approach 
by integrating complementary 
features from its product portfo- 
lio into the WebMethods suite. 

The first post-acquisition 
release, WebMethods 7.1, will 
become generally available later 
this summer. The primary areas 
of improvement are in the appli- 
cation modernization, business 
process management (BPM), 
enterprise service bus (ESB) and 
SOA governance components. 

The WebMethods BPMS 
will be Software AG's primary 
BPM solution going forward, 
and WebMethods' business 
activity monitoring capabilities 
are being extended with new 
editions that will target addition- 
al business requirements. Soft- 
ware AG will continue to sup- 
port the Fujitsu Interstage BPM 
suite, which it currently resells, 
for a minimum of five years. 

Elements of Software AG's 
Crossvision SOA suite are being 



blended into WebMethods' 
products. The WebMethods 
ESB will now be offered in 
Integration, Mediation and 
Orchestration editions, replac- 
ing WebMethods' Integration 
Server, Infravio X-Broker, and 
the Crossvision Service Orches- 
trator, respectively. 

The new release is expected 
to enhance WebMethods' B-to-B 
offering with trading partner self- 
service and new business analyt- 



ics. The 7.1 releases will be back- 
ward-compatible with previous 
versions. 

Meanwhile, Software AG is 
rolling CentraSite and Web- 
Methods Infravio X- Registry 
into a single platform to address 
the full SOA governance life 
cycle. In particular, Software 
AG has added WebMethods' 
policy management and en- 
forcement functionality to 
CentraSite's metadata manage- 



ment and modeling facilities. 

WebMethods' mainframe 
integration technology will be 
combined with Software AG's 
EntireX transaction-oriented 
integration tools. Current users 
of WebMethods mainframe soft- 
ware will be able to migrate to 
the EntireX platform, and Soft- 
ware AG will continue to sup- 
port WebMethods' DataDirect 
Neon Shadow customers. 

"By moving quickly to capi- 



talize on the WebMethods 
acquisition, we're delivering on 
our commitment to being a 
leader in the SOA and BPM 
markets," said Software AG 
executive board member Peter 
Kiirpick, in a prepared state- 
ment. "Going forward, our 
expanded product portfolio will 
also allow us to be aggressive in 
building upon this foundation to 
deliver additional customer 
innovation and value." I 



OpenLogic Opens Support for Developers 



BY ALEX HANDY 

OpenLogic announced in late 
July two new support options 
for its customers. The firm, 
which specializes in offering 
technical support for open 
source software packages, has 
created two new services, tar- 
geted at enterprise developers 
and IT squads who find them- 
selves in trouble when config- 
uring and installing software. 
The Expert Connect Developer 



Support and OpenLogic Pro- 
duction Support services both 
offer phone-based support, to 
help better implement tech- 
nologies such as Apache, ANT, 
Eclipse, JBoss and JUnit. 

For the developers, Open- 
Logic is offering its Expert Con- 
nect support package, with six 
months of service and business- 
hour phone support, for 
US$17,500. IT administrators 
subscribing to OpenLogic Pro- 



duction Support can expect to 
receive 24x7 phone support for 
one year, at a cost of $20,000. 
Expert Connect subscribers can 
choose 20 of the 300 projects 
supported by OpenLogic, and 
Production Support subscribers 
can choose 10 of the 300. 

Kim Weins, vice president of 
marketing at OpenLogic, said 
that many of the support 
requests the company received 
were about configuration issues, 



the sort that come at a project's 
start. In response, OpenLogic 
modified its products to better 
address this need. "The calls we 
were getting were about. . . con- 
figuration and integration 
issues, and performance issues. 
We basically created Expert 
Connect Developer Support, 
which packaged up a set of 
offerings for a project team cre- 
ating an application using open 
source," said Weins. I 
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For Microsoft, It's Ready, Set, Host 

Company's SaaS platform has crossed the production starting line 



BY DAVID WORTHINGTON 

At July's HostingCon 2007, 
Microsoft left no doubt that it 
was serious about the hosted 
applications space. The soft- 
ware giant is preparing to 
launch its next-generation 
hosting platform and is actively 
courting potential partners, 
some of which have already 
begun using its wares full-time. 

FEBRUARY LAUNCH 

The core platform will consist 
of Internet Information Ser- 
vices 7 (IIS), a component of 
Windows Server 2008, SQL 
Server 2008 and Windows- 
based hosting. Microsoft will 
officially launch the hosted 
service on Feb. 27, in Los 
Angeles, along with the 2008 
editions of SQL Server, Visual 
Studio and Windows Server, 
although there is no guarantee 
that the first two of those prod- 
ucts will be generally available 
at that date. 

In the meantime, developers 
with a "Go Live" license may use 
IIS 7 in production. IIS 7 now 
includes integrated health man- 
agement for Web services, new 
configuration and administrative 
options, and PHP support. 

Microsoft also announced at 
HostingCon that cPanel, a 
provider of Web hosting man- 
agement tools, has introduced a 
Windows version of its Web 
control panel. 

In addition, Microsoft is 
readying Web development 
tools, such as Expression Web, 
Silverlight, Virtual Earth and 
Visual Studio 2008, with the 
aim of improving the end-user 
experience. Microsoft CRM, 
Exchange Server and Share- 
Point Services will also be 
available as hosted services. 

The company is embarking 
on a campaign to entice hosting 
providers to its platform. In 
April it created the SaaS Incuba- 
tion Center and SaaS On- Ramp 
programs to help ISVs adopt the 
software-as-a-service delivery 
model and receive business and 
technical guidance. 

Thus far, hosting providers 
such as Applied Innovations, 
DiscountASP.net, HostMySite 
.com, MaximumASP and Web- 
Fusion have adopted Micro- 
soft's next-generation hosting 
platform. 

Yankee Group senior analyst 



Laura DiDio remarked that that Microsoft absolutely needs enterprise; [Microsoft needs] to ability models with its partners 



while the viability of Microsoft's 
SaaS hosting platform remains 
to be seen, hosting is a market 



to be part of. "Hosting solutions 
and capacity-on-demand are 
crucial parts of the corporate 



attract partners to play in the 
space," said DiDio. 

Microsoft will share prefer- 



and is placing emphasis on 
relationships between hosting 
providers and VARs. I 
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TIBCO Takes Wheel of AJAX Bus 



BY JEFF FEINMAN 

TIBCO Software announced on 
July 23 the release of TIBCO 
PageBus, an open source AJAX 
message bus, as well as the 
donation of its core AJAX mes- 



sage bus technology to the 
OpenAJAX Alliance Hub pro- 
ject. The Hub project is an 
effort aimed at providing AJAX 
component interoperability, 
and allowing the use of multiple 



AJAX runtime libraries within 
the same application. 

TIBCO PageBus provides 
publish-and-subscribe messag- 
ing bus programming patterns, 
in the context of a single Web 



page. The tool facilitates com- 
munication between multiple 
AJAX components, allowing 
developers to create composite 
applications from reusable 
parts and services. 
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Kevin Hakman, director of 
developer evangelism for 
TIBCO, defined an AJAX mes- 
saging bus as a JavaScript file 
that lets AJAX components 
publish a message on a topic. As 
an example, if someone wished 
to publish messages about stock 
prices for Amazon.com and 
eBay, he or she would first set 
up a "listener" that would 
receive information on stock 
prices of both companies. 

When asked why TIBCO 
was donating its core AJAX 
message bus technology to the 
OpenAJAX Alliance Hub Pro- 
ject, Hakman spoke of TIBCO's 
expertise in the AJAX field and 
messaging, noting that the com- 
mercial PageBus has a few 
more convenience features on 
it than the OpenAJAX Hub, 
including an "unsubscribe all" 
feature. 

"The main significance of 
publish-and-subscribe in the 
context of the alliance is that 
the members of that group have 
agreed that publish-subscribe is 
a core strategy," he said. "To 
enable multiple AJAX compo- 
nents to interoperate is the pre- 
ferred approach." 

Sandy Kemsley, an indepen- 
dent analyst and blogger for the 
site Column 2, explained that 
PageBus allows the develop- 
ment of mashups to be split up 
more easily between multiple 
developers, since each develop- 
er can focus on a specific com- 
ponent instead of working on 
the interface between compo- 
nents. 

"PageBus exposes the basic 
functions of messaging — pub- 
lish, subscribe, unsubscribe — 
all in less than 5[KB] of 
JavaScript, so that multiple 
AJAX components on an 
HTML page can share data, 
using these standard methods," 
Kemsley said. "It will also allow 
for easier no programming 
required' assembly of compo- 
nents within a PageBus- 
enabled mashup framework." 

'AJAX CHALLENGE' 

As a starting point for TIBCO 
PageBus, the company is host- 
ing the Ultimate Mashup AJAX 
Challenge, a developer com- 
munity project to build the 
world's largest mashup using 
TIBCO PageBus and TIBCO 
General Interface. The chal- 
lenge will run through Sept. 
30, after which TIBCO will 
award prizes to the best 
entries. More details on the 
contest are available at www 
.ajaxchallenge.com. I 
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Corticon Converts Legacy Code to Rules 



BY DAVID WORTHINGTON 

Each day, millions of lines of 
legacy code written in languages 
such as COBOL and PL/1 are 
executed. Corticon Technolo- 
gies thinks that it has the secret 
sauce to modernize those appli- 
cations: a bridge between tools 
that analyze and extract busi- 
ness logic from applications, 
and the company's executable 
business rules model. 

Corticon released its legacy 
application modernization solu- 
tion in mid-July The process can 
transform legacy code into exe- 
cutable business rules models, 
or document legacy code for a 
rewrite into other languages. 

According to Dale Vecchio, 
research vice president with 
Gartner, legacy modernization is 
often complicated because appli- 
cations may consist of millions of 
lines of code that have become 
extremely convoluted, due to 
"less than ideal maintenance and 
enhancement practices." 

David Straus, senior vice 
president of worldwide market- 
ing at Corticon, explained that 
organizations embarking on 
legacy modernization initiatives 
commonly use two approaches: 
tool-based code analysis and ser- 
vice refactoring. Tools analyze, 
decompose, document and parse 
source code to form an applica- 
tion map. Service refactoring 
requires recoding the applica- 
tion into a modern version. 

According to Straus, service 
refactoring has not been an ideal 
solution for most customers, 
when consideration is given to 
the time it takes to rewrite appli- 
cations, and the challenges that 
may arise when companies out- 
source the work. Corticon opted 
to go the tools-based route. 

The source code analysis 
tools used in Corticon's legacy 
application modernization solu- 
tion are licensed from Trinity 
Millennium Group. Trinity 
Modernization Process is a set 
of tools and processes that can 
parse more than 100 compo- 
nents (languages and database 
schemas) simultaneously to 
capture all of the artifacts 
within a business application, 
including business logic. 

Effectively, the process 
attempts to identify and distin- 
guish business variables from 
control variables. 

The business rules extracted 
through the Trinity process are 
then organized as functions, 
which are converted into Corti- 



con rules models. Corticon 
rules models can be exposed as 
Web services and leveraged 
through SOA technologies. The 
data logic is converted into a 
business vocabulary. 

Gartner's Vecchio added, 



"Creating an inventory that 
explains the structural compo- 
nents of an application, as well 
as a more detailed documenta- 
tion of the business rules... in 
an application, is important." 
Corticon has included a facil- 



ity to utilize test data to perform 
functions to help assure that the 
same outcome that happened in 
the legacy application happens 
in the business rules knowledge. 
"What comes out should be 
whole and relevant," said Straus. 



"Business logic is the heart of 
any application, and business 
rules represent an agile form of 
business logic that is represent- 
ed in a way more [business ana- 
lysts and domain experts] can 
understand." I 



Intellectuals solve problems. 
Geniuses prevent them. 



— Albert Einstein 
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System Center Operations Manager 2007. The tool 
is used for monitoring both application failures and 
performance bottlenecks. A new feature of the tool 
is an auto-discovery function that monitors all com- 
ponents of a complex application . . . Real-time 
data integration and data protection tool maker DataMirror has 
released a new version of Transformation Server for z/OS, for IBM 
mainframe environments. Transformation Server provides real-time 
data integration across multiple data stores and platforms. The new 
version allows companies to use features provided by IBM DB2 ver- 
sion 9.1 for z/OS, including scalability enhancements and query 
response times. The offering also has throughput and latency statis- 
tics for keeping users up to speed about what's occurring in the data 
integration process . . . Krugle.net updated its Krugle Enterprise 
code cataloging and search tool on July 27. The new version has 
greater insight into repositories and files on enter- 
prise networks, increasing the range of systems from 
which the engine can pull information . . . IBM, in late July, released 
two updated compilers for Linux platforms. IBM XL C/C++ 
Advanced Edition for Linux 9.0 adds compiler optimizations and 
chip-specific performance enhancements to speed compilation of C 
and C++ applications. IBM XL Fortran Advanced Edition for Linux 
11.1 brings further enhancements in speed and performance through 
new tie-ins with IBM's Power6 processors. Thirty-day free trials of 
both compilers are available at IBM's Web site . . . Swiss visualiza- 
tion specialist Dunes has announced version 3.1 of its Virtual Ser- 
vices Orchestrator, a virtual appliance based on a VMware virtual 
machine running Linux, with a preinstalled database, directory ser- 
vice and library of workflow processes and connectors . . . Software 
Labs, a Sacramento, Calif., developer of data management tools, has 
released xFusion Studio 3.2, adding a data connector for Sage 
Peachtree and updating the QuickBooks data connector, while also 
adding database cloning features, graphical export wizards for SAP 
Business One, and integration support for Microsoft Reporting Ser- 
vices . . . Norwegian search provider Fast Search & Transfer has 
released Fast InStream 5.1, an embedded search platform designed 
for OEMs and technology providers. The update offers a GUI-based 
classification tool, contextual navigation and silo indexing . . . Rain- 
ing Data has announced a beta release of its TigerLogic 3.0 XML 
data management server, which adds a cache 
adapter that works with a variety of data sources, 
as well as adding replication features and support 
for the W3C XML Query 1.0 specification. TigerLog- 
ic 3.0 allows the use of up to 64GB of cache memory, and runs on 
Linux, Solaris and Windows. 




, PEOPLE , 



Ounce Labs has created an Advanced Research Team, a group of secu- 
rity experts focused on raising awareness of software security 
and the development of best practices for application security. Mem- 
bers of the team include Ryan Berg, chief scientist of Ounce Labs; 
Dinis Cruz, chief evangelist of the OWASP application security com- 
munity; Christian Borlovan, a security researcher with the (U.S.) Air 
Force Research Laboratory; and Bruce Mayhew, a 
Web application security course instructor for the 
SANS Institute . . . Former Borland Software COO 
Scott Arnold has been named to the same position at 
MarketTools, a provider of on-demand market 
research. Prior to his employment with Borland, 
Arnold was a principal with McKinsey & Co., and was 
in charge of the firm's technology sector . . . TopCoder, an online pro- 
gramming skills assessment and competitive software development 
company, has named Ira Heffan general counsel. Heffan most recent- 
ly worked with the intellectual property transactions and strategies 
group for the law firm Goodwin Procter, where he helped handle soft- 
ware licensing and IP transactions. Heffan will oversee TopCoder's 
legal affairs, and handle IP for TopCoder's clients. I 
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When Failure Isn't an Option 

Java joining Ada, C/C++ as safety-critical solution 



BY JENNIFER DEJONG 

Safety-critical applications — 
such as those that let an aircraft 
fly on autopilot — have long 
been written in Ada or C/C + + . 
But now Java appears poised to 
become the language of choice 
for developing software that 
cannot afford to fail. 

"The industry wants to 
leverage mainstream tech- 
nologies for safety-critical 
development efforts," said 
Kelvin Nilsen, chief technolo- 
gy officer for Aonix, which 
released PERC Pico, its safe- 
ty-critical Java offering 
earlier this year. Writing 
such applications in 
Java provides technical 
advantages compared 
with developing them in 
C/C + + , he said. "C and 
C++ expose the program- 
mer to vulnerabilities 
that made the code diffi- 
cult to maintain and cer- 
tify. Those languages 
were not designed for 
safety-critical applica- 
tions." 

But Ada was. And if it 
falls out of favor for safe- 
ty-critical development 
efforts, it is not because 
the language isn't up to 
the task, Nilsen said. 
"Ada is technically strong 
for safety-critical. It was 
designed for that pur- 
pose." 

But fewer and fewer 
developers are skilled in 
Ada, which dates back to 
the early 1980s, and 
increasingly it is perceived as an 
older language, added Doug 
Locke, specification lead for 
the expert group working on 
Java Specification Request 
(JSR) 302, known as Safety 
Critical Java Technology. 

Locke was engaged by IT 
consortium The Open Group to 
lead the JCP effort. "Technical- 
ly there is nothing wrong with 
Ada. But if you have Ada on 
your resume, you will have 
trouble getting jobs." 

In practice, language deci- 
sions get made for reasons 
other than technical ones, 
noted Robert Dewar, presi- 
dent and CEO of AdaCore, 
which provides Ada tools and 
services. "Language choice 
has always been significantly 
a matter of personal taste 



and enthusiasm, and there 
are lots of Java enthusiasts 
around." 

AdaCore is a member of the 
JSR 302 expert group. 

COMPLY BEFORE YOU FLY 

Locke said that JSR 302 is 
expected to reach completion 
by year's end. The specifica- 
tion builds on the earlier Real 
Time Specification for Java 
(RTSJ), the result of JSR 1. 
RTSJ, among other things, 
devised a way for Java to carry 
out garbage collection — its 




T 

X and C++ expose the 
programmer to vulnerabilities 
that made the code difficult to 
maintain and certify. ' 

—Kelvin Nilsen, CIO of Aonix 

scheme for managing memory 
allocation — without creating 
the unacceptable delays that 
real-time applications, such 
as those carrying out stock 
market transactions, cannot 
tolerate. 

Real-time is also key for 
safety-critical applications, but 
they are further complicated 
by the need to comply with 
standards, such as DO-178B, 
which the Federal Aviation 
Administration depends on to 
certify systems that an aircraft 
relies on for operation. "You 
have to prove that the applica- 
tion will not throw exceptions 
it cannot handle," said Locke. 
"That is the big issue we are 
dealing with." Another chal- 
lenge is making sure the code 
doesn't become so complex 



that it is too difficult to certify, 
he said. 

The expert group working 
on JSR 302 has faced political 
challenges as well. Two of 
its members — Aonix and Ger- 
man software firm aicas — have 
already delivered safety- 
critical Java offerings, and 
the decisions each has made 
in its products have in- 
fluenced their views on how 
the specification should be 
implemented, Locke said. "It 
has caused some friction." At 
issue is which set of assertions 
and corresponding static 
analysis mechanisms 
the specification should 
implement. 

"The dilemma for the 
group is how or whether 
to combine them," Locke 
said. 

Assertions are essen- 
tially the rules that specify 
how a safety-critical Java 
application guarantees it 
won't fail. 

When asked whether 
Aonix's contributions to 
JSR 302 are biased, 
Nilsen said, "We certainly 
have our opinions on 
what the spec should look 
like. Every company has a 
bias. But we will find 
some common ground, 
and the specification will 
standardize that, leaving 
room for vendors to aug- 
ment the spec," he said. 
"That is the nature of the 
marketplace." 

Safety-critical develop- 
ment efforts are moving 
increasingly into the Java arena, 
but that doesn't mean enter- 
prise Java programmers are 
necessarily qualified to write 
them, said AdaCore's Dewar. 
"An argument you will also hear 
is that it is easier to find Java 
programmers than Ada pro- 
grammers. This is quite true, 
but irrelevant." 

What is needed for building 
safety-critical systems are 
engineers trained in the tech- 
niques of safety-critical sys- 
tems, he said. 

Nilsen didn't disagree. "It's 
not so much you can repur- 
pose the Java developer [for 
safety-critical applications] but 
you can repurpose a lot of soft- 
ware created around the Java 
platform," he said. I 



Innovations by InterSystems 



• 






Embed Ensemble. Make applications richer, without rewriting. 



When you embed InterSystems Ensemble® in your applications, they become more valuable. 
Ensemble -enriched applications can connect with multiple systems and processes. And you'll be able 
to rapidly enhance your existing applications - without rewriting them - InterSystems 
by adding rich Web interfaces, adaptable workflow, rules -based business 
processes, and other new features. Ensemble is the easiest integration soft- 
ware to use because it's not a stitched-together suite of separate parts. We 
created it as a single, architecturally consistent technology stack (integration server, data server, 
application server, and portal development software). So Ensemble projects are typically completed 
in half the time required with previous generations of integration products. Embed our innova- 
tions, enrich your applications. 



InterSystems 

ENSEMBLE' 



See a demonstration at InterSystems.com/Ensemblel9JJ 

© 2007 InterSystems Corporation. All rights reserved. InterSystems Ensemble is a registered trademark of InterSystems Corporation. 7-07 Valr,nsl9 SO 1 i 



28 



NEWS 



Software Development Times . August 15, 2007 . 



www.sdtimes.com 




RSSBus 



beyond b logging 

new ways to connect your data 



An IntcgrtlEfcd frtentmrfk of JUcJfi ttfrf Jrrrfces ihm cijSc- 
%mp^B ptDlmok wjcJs *ra ftSS rand <A TOM tti rfrfrver t? rii 
set ef ma^icm fftrayjA il/ufccnire-d wiformminn jfwdi wJi 

Mriftfici lik« , opp/jCEfrojis, and ijat e^ n. 




FEED SERVER 



Easily create dynamic RSS fehjs from 
Databases, Spreadsheets, Directores, 

and other information sources. 

Choose from hundreds of available 
connectors for various s^sthms and 
applications, or build your own 

Use RSS feeds as Simple Web Services to 

COMMUNICATE WFTH YOUR PARTNERS, 
VENDORS, AND CUSTOMERS 



- free trial at www.r55bus.com - 



Embarcadero Suite-ens 
Change Management Tools 

New modules for governance, consistency 



BY P.J. CONNOLLY 

Many shops have to manage database 
platforms from more than one vendor, 
and Embarcadero Technologies has 
expanded one of its tools to bridge the 
gaps. The company released Change 
Manager 4.0 at the end of July but the 
product's no longer just a database 
schema change manager. 

In the latest release, Embarcadero has 
transformed its standalone tool into one 
module of a suite, and is adding separate- 
ly available modules that examine server 
configuration and compare and synchro- 
nize data across a variety of platforms. 

The original tool, now known as 
CM/Schema, allows users to compare 
and reconcile database schema. The tool 
also generates schema synchronization 
scripts, keeping databases consistent. It 
offers schema restoration to a saved 
snapshot, while maintaining the integri- 
ty of user security. If desired, schema 
changes can trigger e-mail alerts 
through CM/Schema's monitoring facili- 
ty. A schema capture wizard is designed 
to make the process of capturing and 
archiving database schemas child's play, 
instead of a surgical process. 

CM/Config is one of the new compo- 
nents of Change Manager, and can track 
thousands of database instances, accord- 
ing to Embarcadero. Users define con- 
figuration standards through a graphical 



editor and can compare and monitor 
essential database configuration attrib- 
utes. They also can identify setups that 
are out of compliance with corporate 
standards or government regulations. 
Users can look at settings systemwide, or 
focus on key parameters. 

CM/Data is the other new addition to 
Embarcadero's database tooling, and it 
offers users the ability to compare and 
synchronize data across database 
instances, without regard to the underly- 
ing DBMS. CM/Data can help users 
ensure the accuracy of reference data, 
manage data differences and validate 
replication across databases, the compa- 
ny claims. The entire database can be 
selected for comparison, or users can 
emphasize key attributes and tables. 

CM/Data's drag-and-drop editor 
allows for the rapid definition of com- 
pare and synchronization jobs. In test 
scenarios, the company notes that 
CM/Data allows the validation of test 
results, while recreating the environ- 
ment for the next round. A SQL editor 
allows for code folding, error identifica- 
tion and syntax highlighting with an out- 
line view for easier comprehension. 

Change Manager 4.0 offers broad sup- 
port for a gamut of commercial DBMSes; 
Microsoft SQL Server, Oracle and Sybase 
platforms are supported, as is IBM DB2 
on Linux, Solaris and Windows. I 



VMWARE INTRODUCES BENCHMARKS 
FOR VIRTUALIZED WORKLOADS 



BY JEFF FEINMAN 

Keeping score may be the only way to 
figure out if one is making progress with 
new technology. EMC's VMware sub- 
sidiary has created a benchmark system 
that provides a way to measure the per- 
formance of applications running in vir- 
tualized environments. 

Company officials claim that 
VMmark, announced on July 23, is the 
first benchmarking system that mea- 
sures the scalability of heterogeneous 
virtualized workloads on x86-based 
hardware. VMmark measures the per- 
formance of multiple virtual machines 
running at the same time on one server. 
The tool models a consolidation scenario 
with different applications running 
simultaneously, each in its own virtual 
machine. It can also be used to compare 
the performance of two different servers 
for running virtualized workloads. 

Server vendors that conduct bench- 
mark testing can publish a VMmark 
score that provides scaling information 



about the workloads each product can 
support, and the overall performance 
level of virtual machines running on a 
server. 

"With customers asking for ways to 
measure and compare performance on 
different server platforms, VMware 
worked closely with partners to design 
and implement VMmark," said Raghu 
Raghuram, vice president of product 
and solution marketing for VMware. 
"We created this benchmark to enable 
customers to make the best decisions 
about running mission-critical applica- 
tions in virtual infrastructures." 

Raghuram said that VMware is 
attempting to promote open standards 
and formats in the virtualization indus- 
try. In November 2006, benchmark 
developer SPEC (Standard Perfor- 
mance Evaluation Corp.) formed a 
working group to develop a standard 
benchmark for measuring virtualization 
performance; VMware was a founding 
member of that committee. I 
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Merging Applications Is a Political Issue 



< continued from page 5 

to stop and review it." 

In the end, Construx's Pelo- 
quin said that the code itself 
isn't really much of a factor in 
merging decisions. To him, 



functionality is the king, and 
evaluating code line-by-line 
before a merge is simply a 
waste of time, save for 
extremely complex algorithms 
and functions. 



"At the code level, fine-grain 
code reuse still seems to be 
pretty elusive. With technolo- 
gies over the last five to 10 
years, they do make it easier if 
you think ahead, [such as 



designing] end-tier architec- 
tures with well-designed data- 
bases and a middle tier," Pelo- 
quin noted. "Once the concrete 
is poured for the code, it sel- 
dom seems that it can be 
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removed [and] plopped into 
something else." 

Peloquin identified another 
way to ease code merges: 
being honest with the develop- 
ers involved. If a member of 
the team is going to become 
redundant because of the 
merging of two development 
groups, that person should be 
informed, said Peloquin. Man- 
agers can then push for 
retraining, or allow the devel- 
oper to have ample time to 
find new employment. Doing 
so, he said, could help to min- 
imize the feelings of distress 
and fear that often consume 
the victims of a merger or 
acquisition. I 

Jive's Talking Up 

ClearSpace 

Extensions 

BY ALEX HANDY 

Actress Barbara Billingsley 
used her ability to translate 
from "Jive" to- English in the 
1980 comedy classic movie 
"Airplane," but Jive Software is 
far more serious about Clear- 
Space, a Web 2.0-style enter- 
prise collaboration platform 
packed with wikis, forums and 
blogging software. ClearSpace 
is now open for extension 
by developers, the company 
announced at the Open Source 
Conference (OSCON) in Port- 
land, Ore., in July. 

According to Matt Tucker, 
Jive's CTO, ClearSpace is a 
break from existing paradigms 
that are either limited single- 
function tools or heavyweight 
platforms integrated with the 
large enterprise collaboration 
environments. "ClearSpace is 
the third approach, where we 
bundle together a lot of the 
functionality," said Tucker. He 
also said that many of his staff 
members spoke at OSCON 
about VoIP (Voice over IP) and 
its use in the development of 
collaborative applications. 

The company's Web site, 
www.jivesoftware.com, now 
hosts the new ClearSpace 
open source developer com- 
munity. The company is also 
holding a contest to find the 
best plug-in for its collabora- 
tion platform, and hopes to 
have a winner chosen before 
the end of the year. I 



www.sdtimes.com 



Software Development Times . August 15, 2007 



NEWS 



31 



Pegasystems Gives BPM Its Wings 



BY DAVID WORTHINGTON 

Winging it is generally the wrong 
way to run a business process 
management (BPM) initiative. 
Pegasystems SmartBPM 5.3, 
released in mid- July is geared to 
boost developer productivity 
while providing an end-to-end 
solution that helps businesses 
plan, build and manage process- 
management solutions through 
their entire life cycle. Pegasys- 
tems says that more than 40 
improvements have been made 
to the suite in this release. 

PegaRules Process Com- 
mander sits at the core of the 
suite. Process Commander is a 
browser-based user environ- 
ment for business analysts and 
IT operations staff to build and 
manage human and automated 
process workflows. The new 
release includes automated 
testing, encryption-based secu- 
rity and faster localization capa- 
bilities, all aimed at accelerat- 
ing development. 

An optional unit test manager 
has been added to the suite, 
allowing developers to perform 
more frequent regression testing 
on SmartBPM applications, with 
less work. Test case data is col- 
lected and managed automatical- 
ly, ensuring application integrity. 

Encryption-based security 
brings SmartBPM into closer 
compliance with American pri- 
vacy mandates and laws govern- 
ing international finance, 
including the Health Insurance 

Sun Fires Up 
JavaFX Compiler 

BY ALEX HANDY 

Sun Microsystems has opened 
the curtains on a new open 
source project dedicated to 
building a compiler for JavaFX 
script, the language Sun intro- 
duced at JavaOne in May as an 
answer to Adobe Systems' 
Adobe Integrated Runtime and 
Microsoft's Silverlight. 

Sun claims it already has 
produced a compiler for the 
language, and the existing code 
is now available under GPLv2 
at openjfx.dev.java.net. The 
release of the compiler code is 
accompanied by additional 
plug-ins for NetBeans that 
bring the scripting language 
into Sun's community IDE. 
These plug-ins are some of the 
first development tools to arrive 
for the new language. I 



Portability and Accountability 
Act (HIPAA) and Title III of 
the Patriot Act. Data may be 
encrypted at any point or level; 
a range of encryption algo- 
rithms is supported. 



The PegaRules rules engine 
now allows developers to use 
declarative rules to determine 
the optimal way of retrieving 
data from external systems. 
Pegasystems says that declara- 



tive rules will make applica- 
tions more responsive, while 
reducing the time-to-market 
for new solutions. 

The suite bundles a case man- 
agement application, process 



analyzer and process simulator, 
and will integrate with content 
management systems, portals 
and enterprise service-oriented 
architectures with its connectors 
and adapters. I 



Your best source for 
software development tools! 



Now with 
64-bit Support! 



Paradise # 
L050569 

$ 800." 



Paradise # 
T340201 

$ 432." 



Paradise # 
D770148 

$ 1,444. 
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Paradise # 
A14137P 

$ 476." 



LEADTOOLS 
Raster Imaging Pro 

by LEAD Technologies 

Raster Imaging Pro gives developers the tools 
to create powerful imaging applications. LEAD- 
TOOLS libraries extend the imaging support of 
the .NET framework by providing comprehen- 
sive support for image file formats (1 50+), 
200 image processing filters, compression, 
TWAIN scanning, high-speed image display, 
color conversion, screen capture, special effects 
and more. 
•. NET, API & C++ Class Library 

• New Web Forms Control 

• New Class Libraries for .NET 

• Royalty Free „ . 

programmers.com/lead 

DevTrack 

Powerful Defect and Project Tracking 
by TechExcel 

TechExcel DevTrack is the most powerful, 
affordable and easy-to-use defect and project 
tracking tool for development organizations. 
You'll dramatically transform your development 
processes, save significant time and resources, 
and deliver quality products on-time and 
on-budget. 

• Distributed team support 

• Sophisticated workflow engine 

• Built-in indexed search engine 

• Point-and-click administration 

• Fully configurable user interface 

programmers.com/techexcel 

/n software Red Carpet 
Subscriptions 

by /n software 

/n software Red Carpet™ Subscriptions give 
you everything in one package: communica- 
tions components for every major Internet 
protocol, SSL and SSH security, S/MIME 
encryption, Digital Certificates, Credit Card 
Processing, ZIP compression, Instant 
Messaging, and even e-business (EDI) 
transactions. .NET, Java, COM, C++, Delphi, 
everything is included, together with per 
developer licensing, free quarterly update CDs 
and free upgrades during the subscription term. 



programmers.com/nsoftware 

Adobe FlexBuilder 2 

by Adobe 

Adobe® FlexBuilder™ 2 software is a rich 
Internet application framework based on 
Adobe Flash® that will enable you to 
productively create beautiful, scalable 
applications that can reach virtually anyone 
on any platform. It includes a powerful, 
Eclipse™ based development tool, an 
extensive visual component library, and 
high-performance data services enabling 
you to meet your applications' most 
demanding needs. 



programmers.com/adobe \ 



800-445-7899 



dtSearch Web with Spider 

Quickly publish a large amount of data to a Web site 

• Dozens of full-text and fielded data search options. 

• Highlights hits in XML, HTML and PDF, while 
displaying links and images; converts other files 
("Office," ZIP, etc.) to HTML with highlighted hits. 

• Spider adds local or remote web sites (static and 
dynamic content) to searchable database 

• Optional API supports SQL, C++, Java, and all 
.NET languages. 

"Bottom line: dtSearch manages a terabyte of 
text in a single index and returns results in 
less than a second. " — InfoWorld 



programmers ift 

r s paradise Jl 

iHthH^I • VMware® Infrastructure 3 

Website ■ f m1 j The most widely deployed software suite for M _ 



Download dtSearch Desktop with 
Spider for immediate evaluation 

c-tree Plus® 

by FairCom 

With unparalleled performance and sophistication, 
c-tree Plus gives developers absolute control over 
their data management needs. Commercial 
developers use c-tree Plus for a wide 
variety of embedded, vertical market, 
and enterprise-wide database applications. 
Use any one or a combination of our flexible 
APIs including low-level and ISAM C APIs, simplified 
C and C++ database APIs, SQL, ODBC, or JDBC. 
c-tree Plus can be used to develop single-user and 
multi-user non-server applications or client-side 
application for FairCom's robust database server 
— the c-treeSQL™ Server. Windows to Mac to 
Unix all in one package. 



Single Server 
Paradise # 
D29072P 

$ 873." 

programmers.com/dtsearch j 



VMware® Infrastructure 3 

The most widely deployed software suite for 
optimizing and managing industry standard IT 
environments through virtualization — from the 
desktop to the data center. The only production- 
ready virtualization software suite, VMware 
Infrastructure is proven to deliver results at 
more than 20,000 customers of all sizes, used 
in a variety of environments and applications. 
The suite is fully optimized, rigorously tested 
and certified for the widest range of hardware, 
operating systems and software applications. 
VMware Infrastructure provides built-in management, 
resource optimization, application availability and 
operational automation capabilities, delivering 
transformative cost savings and increased operational 
efficiency, flexibility and service levels. 



2 Processors 
Paradise # 
V55071H 

$ 888." 



programmers.com/vmware 



*#**** 



Paradise # 
F010131 
99 



711, 



TX Text Control 13 

Word Processing Components 

TX Text Control is royalty-free, robust and 
powerful word processing software in reusable 
component form. 

•. NET WinForms control for VB.NET and C# 

• ActiveX for VB6, Delphi, VBScript/HTML, ASP 
•File formats RTF, DOC, HTML, XML, TXT 

• PDF export without additional 3rd party 
tools or printer drivers 

• Nested tables, headers & footers, text frames, 
bullets, numbered lists, multiple undo/redo 

• Ready-to-use toolbars and dialog boxes 



Professional Edition 
Paradise # 
T79023W 

$ 669." 



programmers.com/faircom j 
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Single Developer 
Paradise # 
TB30026 

$ 549." 



Telerik RadControls 

by Telerik 

Add grid, combo, editing, navigation and charting 

functionality to your AJAX and ASP.NET projects. 

RadControls for ASP.NET enhances your Web 

applications by adding AJAX functionality to your 

ASP.NET projects. The suite takes full advantage 

of the features included in Visual Studio 2005. 

RadControls for ASP.NET helps developers deliver 

feature-rich, standards-compliant (WAI-A, WCAG 

1.0, XHTML 1.1) and cross-browser compatible 

Web applications, while significantly cutting 

their development time. RadControls for ASP.NET 

includes: RadEditor, RadTabstrip, Radlnput, 

RadCalendar, RadUpload, RadWindow, RadAjax, 

RadGrid, RadCombobox, RadMenu, RadSpell, 

RadChart, RadTreeview and more. «.«■»■..«». ,««, /t«i«r:L 

programmers.com/telerik 

Intel® Cluster Toolkit 

by Intel® 

Create applications for Intel® processor- 
based cluster systems with performance- 
enhancing tools that include perform- 
ance libraries, performance analyzers, 
and benchmark tests — integrated into 
one easy-to-install software bundle. 
Intel® Cluster Toolkit 3.0 for Linux 
adds more than 20 new features to the 
core libraries and tools to efficiently 
develop, optimize, run, and distribute 

parallel applications on clusters with Paradise # 

Intel processors. 123 31 101 AO 1 

$ 713." 

programmers.com/intel i 



SlickEdit® 2007 

by SlickEdit Inc. 

SlickEdit® is the code editor that delivers 
unparalleled speed, power, and flexibility. 

Type fewer characters, and make fewer errors using 
syntax expansion, completions, aliases, and code 
templates. Create and manage large workspaces and 
projects. Diff files, test regular expressions, do builds, 
and interact with version control. 

Configure SlickEdit to match your coding style. 
Choose from 1 3 editor emulations, customize menus, 
toolbars, key bindings, and mouse operations. 

Code in over 40 languages on 8 platforms. SlickEdit 
works with Windows Vista and supports Solaris x86. 



m 



for Windows 
Paradise # 
M3902BA 

$ 254." 



InstallShield 2008 

by Macrovision Corporation 

With its award-winning technology deployed 
on more than 500 million PCs globally, 
InstallShield® is the industry standard for 
authoring high-quality Windows Installer and 
InstallScript installations — ensuring that 
software applications are correctly installed, 
configured, updated and eventually unin- 
stalled on Windows®-based desktops. 
InstallShield lets software producers keep 
customer satisfaction high and support 
costs low. 



programmers.com/slickedit 
rttdHtehJ 2 DOS 



Paradise # 
121 02 1 1 AO 1 

$ 1,689." 

programmers.com/macrovision 
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Perforce Fast Software Configuration Management 




Perforce 

SOFTWARE 



Down loo d o free copy of Perforce, no questions 

asked, from www.perforcB.Goni. Free technical support is 
available throughout your evaluation- 
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Windows 7 Penciled In for 2010 



< continued from page 1 

tions there will be. However, 
the licensing of the new operat- 
ing system may change: 
Microsoft is mulling a subscrip- 
tion service as a way to extend 
Windows with extra functional- 
ity No word as to whether a 
subscription would be an 
option, or the only way to 
license Windows 7, or if it will 
appear at all. 

The three-year figure isn't 
hard and fast yet. A prepared 
statement from the company 



noted that Microsoft expects a 
three-year time frame to deliv- 
er Windows 7. But at the same 
time, the statement noted the 
final release date will be deter- 
mined by "meeting the quality 
bar." 

Meanwhile, the company 
has its hands full with Windows 
Vista Service Pack 1, due 
toward the end of this year, and 
its new desktop management 
software. 

The Microsoft Desktop 
Optimization Pack is currently 



available only to Software 
Assurance volume licensees. It 
bundles asset management, 
diagnostics and recovery tools; 
group policy management and 
desktop-error monitoring facili- 
ties; and application virtualiza- 
tion. Microsoft says it will roll 
out two more updates to 
MDOP before it launches Win- 
dows 7. 

But the next version of its 
desktop Windows platform isn't 
the only operating system being 
built by the company. Customers 



are still awaiting Windows 2008 
Server, which Microsoft claims 
will be generally available in 
February. Between now and 
then, Microsoft has some ana- 
lysts asking questions about the 
company's licensing plans for 
future versions of Windows. 

SD Times has learned that 
an R2 update release of Win- 
dows Server 2008 is slated for 
2009. Microsoft spokesperson 
David Hollis confirmed R2 but 
declined to share any details 
about its feature set. I 



FORRESTER QUESTIONS SOFTWARE ASSURANCE VALUE PROPOSITION 



Are Microsoft's software licenses a good idea, or a waste of mon- 
ey? That's the question raised by a new Forrester Research report, 
which doubts the value of buying three-year licensing subscrip- 
tions, in light of Microsoft's abysmal record of shipping on time in 
recent years. The report noted that Microsoft's penchant for slip- 
ping release dates made it difficult for IT procurement and sourc- 
ing professionals to justify renewing a three-year Software Assur- 
ance (SA) subscription. 

"If Microsoft were to adhere to a four-year major release sched- 
ule, the cost of SA could be more than the cost of a new license 
(29% multiplied by four years is 116%) for desktop SA customers," 
the report read. "Server SA customers might recoup their invest- 
ment (25% multiplied by four years is 100%). And that's if 
Microsoft upgrades its products on a four-year release schedule," 
midway between the hopes for Windows 7 and the reality of its pre- 



decessor, Windows Vista. 

The July report, titled "Economics and Alternatives to 
Microsoft's Software Assurance," also cited deployment lag times 
and the cost of new Enterprise Client Access Licenses as reasons 
for questioning the subscription program's future value. 

In response to the report, Stacie Sloane, marketing and com- 
munications director for worldwide licensing and pricing at 
Microsoft, argued that customers should not rely on Forrester's 
assumptions and ideas, but should instead speak to their Microsoft 
sales representative directly. 

Sloane added that an estimated 75 percent of enterprise SA 
customers are renewing their agreements, which she claims is 
reflective of the value customers see in the program. However, she 
had no explanation for the 1 in 4 customers who don't re-up. 

—David Worthington 



Java EE 6 Aiming for Late 2008 



< continued from page 1 

whatever we can so these will 
layer more cleanly. Clearly 
there are a large number of 
users who've come to rely on 
these technologies," said Chin- 
nici. "[It's an] overall win for the 
platform if you can use these 
technologies with a minimum 
of fuss and configuration 
headaches." 

As the Java EE 6 specifica- 
tion moves forward, additional 
JSRs will come under the 
umbrella of the enterprise edi- 
tion. JSF 2.0 will be one of 
those specifications, though the 
expert committee for JSR 314 
(the specification for JSF 2.0) is 
still growing, according to 
Roger Kitain, staff engineer at 
Sun and a member of that com- 
mittee. He believes that JSF 2.0 
should gain extensive support 
for AJAX, to work in tune with 
Java application servers. Kitain 
noted that five members of the 
JSR 314 committee are deeply 
involved in AJAX in their day- 
to-day lives. 

More JSRs may be generat- 
ed for Java EE Profiles, a new 




Sun's licensing policies are a 
sticking point between Sun and 
Apache, says Geir Magnusson Jr. 

feature of the enterprise edi- 
tion that was conjured up in 
the initial draft of JSR 316. 
Profiles, explained Chinnici, 
amount to optimized Java EE 
stacks that are specifically tai- 
lored to common duties. Each 
of these profiles will be 
defined in its own JSR, he said, 
and added that the first and 
only of these to appear in time 
for Java EE 6's release would 



be a Web-specific profile. 
Chinnici said he hopes that, in 
the future, additional profiles 
will be defined, particularly for 
jobs such as integration. 

But the road to the final Java 
EE 6 specification has its 
naysayers. Geir Magnusson Jr. 
represented the Apache Soft- 
ware Foundation on the Java 
EE 6 executive committee, and 
in that capacity he voted against 
the formation of JSR 316, the 
only negative vote during the 
approval process. 

Magnusson, who currently 
heads up software develop- 
ment at Internet TV startup 
Joost, is also the father of the 
Harmony project, which is 
building an Apache-licensed 
implementation of Java SE 5. 
Magnusson has cited Sun's 
licensing policies as a point of 
friction between Sun and 
Apache. Magnusson, however, 
doesn't complain about the 
technical merits of the Java 
EE 6 plans; his thumbs-down 
vote was cast for political rea- 
sons, he admitted to SD Times 
in an e-mail. I 



Intel Library 
Open Source 
Experiment 

< continued from page 1 

added FreeBSD and Solaris. 
Reinders said that the primary 
goals of the project are operat- 
ing system, compiler and 
processor independence. 

Reinders — who recently fin- 
ished writing a book about the 
library — said Intel would use its 
Threaded Building Blocks expe- 
rience as a bellwether for future 
ventures in open source projects. 
But he was cautious to avoid 
even the slightest implication 
that Intel's compilers, famous for 
their performance, would ever 
be released as open source. 

"I don't think open sourcing 
our compiler would create a 
community... creating competi- 
tion around GCC isn't good for 
anyone," said Reinders. 

Developers wanting support 
services for Threading Building 
Blocks can still obtain a com- 
mercial version of the library 
for US$120 per seat. I 



BLACK DUCK 
TAKES ON 
COMPLIANCE 
WITH GPLv3 

BY DAVID WORTHINGTON 

Think the latest version of the 
GPL is confusing? Just try to 
keep track of the software com- 
ponents that are governed by 
version 3 versus those that are 
not. If that doesn't make one's 
head spin, the task will be com- 
pounded by the presence of 
other open source license 
schemes, including the Apache, 
BSD and Open Source Initia- 
tive (OS I) licenses. 

Black Duck Software claims 
it has the answer to the problem 
of staying in compliance with a 
flock of licensing require- 
ments — whatever they may be. 
Black Duck released protex- 
IP/development 4.4 on Aug. 6, 
approximately one month after 
GNU General Public License 
version 3 (GPLv3) was finalized. 

The 4.4 release is designed to 
help organizations incorporate 
code from open source projects 
and distinguish projects that 
have explicitly switched to 
GPLv3 from those that have not. 

Users may now add com- 
ments about specific license 
requirements and use LDAP 
directories to manage access to 
the system. The administration 
GUI has been updated and pro- 
vides an overall view of protex- 
IP server functions, including 
access and usage data. 

BlackDuck CEO and presi- 
dent Doug Levin explained that 
the company monitors more 
than 3,500 open source sites on 
the Internet. Code from pro- 
jects is entered into a central 
database and converted into 
smaller representations of the 
original code. protexIP identi- 
fies code in customer projects 
and links it to the license that 
governs it. 

The technology centerpiece 
of protexIP is the company's 
KnowledgeBase library that 
archives licensing details for 
more than 140,000 open source 
and vendor-added software 
components. Customer library 
repositories receive updates via 
the Web each month. 

Specifically, KnowledgeBase 
includes entries on patent licens- 
ing grants, express provisions, 
patent retaliation clauses, and 
anti-DRM clauses. I 
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Wind River Takes Testing to the Floor 

Ships new debugging tools for manufacturing, production environments 



BY P.J. CONNOLLY 

July may have been the month 
of debugging for Wind River 
Systems, which updated one of 
its lab tools while releasing a 
new package designed to bring 
first-class debugging tools to 
manufacturing and production 
environments. 

On July 25, the company 
released Wind River Lab Diag- 
nostics 2.1, adding support for 
Wind River Linux 1.5 on Intel 
and PowerPC, and VxWorks 
6.x on MIPS and XScale 
processors. The initial release, 
version 2.0, supported Wind 
River Linux 1.4 and VxWorks 
6.x on most Intel and PowerPC 
processors, as well as VxWorks 
5.5.1 on PowerPC. 

Lab Diagnostics 2.1 adds 
kernel-level instrumentation, 
with the aim of giving develop- 
ers and QA teams the ability to 
use the tool's Sensorpoints fea- 
ture and examine how code is 
running. The new release also 
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A LabView test application can be built by wiring up the individual OCD Vis in the LabView Block Diagram view. 



allows users to package a variety 
of Sensorpoint options into a 
single executable, allowing the 
development of tests for com- 
plex systems and large builds. 
The company claims that tests 



running with the new Sensor- 
point scripting options can exe- 
cute up to a thousand times 
faster than previous methods. 

Wind River Systems also 
announced the release of pro- 



duction-oriented test tools, in 
the new Wind River On-Chip 
Debugging for Manufacturing 
and Test, on July 23. The pack- 
age is a combination of the com- 
pany's on-chip debugging tools 



with manufacturing and test 
tooling that offers driver-based 
integration with National 
Instruments' LabView platform 
and development environment, 
and is designed to allow diag- 
nostics and defect reduction on 
the production floor. 

The new production tool 
package includes an updated 
version of Wind River's On- 
Chip Debugging Utility that 
adds the ability to selectively 
extract data from device memo- 
ry instead of having to perform 
offline scans of memory dumps, 
and also adds the ability to cre- 
ate custom applications by 
using Lab View's "virtual instru- 
ments" feature. 

On-Chip Debugging for 
Manufacturing and Test also 
includes the company's ICE 
and Probe emulators, and 
works with a number of proces- 
sors, including those from 
Broadcom, Freescale, Intel and 
PA. Semi. I 



New Platforms For 
Green Hills Tool Set 



BY P.J. CONNOLLY 

Don't tell anyone at Green Hills 
Software that one's supposed to 
take it easy during the summer, 
because at the end of July, the 
company announced that it had 
once — make that twice — again 
expanded the reach of its tool set. 
On July 26, the company 
disclosed that its tools were 
now available for use with 
C avium Networks' multicore 
Octeon MIPS 64 processor fam- 
ily. C avium's processors are 
used in advanced networking 
applications and offer from one 
to 16 cores on a single chip. 



The tool set Green Hills 
supports with the Octeon fami- 
ly includes the Multi IDE and 
C/C++ compilers, as well as the 
DoubleCheck static analysis 
tool, the ji-velOSity real-time 
operating system, the Time 
Machine back-in-time func- 
tionality, and the Green Hills 
probe, for debugging via the 
Octeons' Enhanced JTAG port. 

Earlier in the week, on July 
23, the company announced 
that the |i-velOSity RTOS was 
now supported for use with the 
NEC Electronics V850 family. 
The 32-bit RISC processors are 




(i-velOSity is ideal for the NEC 
V850 thanks to its low overhead, 
says Green Hills' Kleidermacher. 

used in high-volume automotive 
and metering solutions. Accord- 
ing to Green Hills CTO David 
Kleidermacher, the small mem- 
ory and power footprint of 
ji-velOSity make it ideal for 
platforms such as the V850. I 



Chinese Firm Enters 
Smartphone Market 

Shanghai-based Chipnuts unveils 
new operating system with handset 



BY P.J. CONNOLLY 

When speaking of smart- 
phones, the most familiar plat- 
forms may well be Palm, Sym- 
bian and Windows Mobile. But 
there's a new player at the table, 
hailing from Shanghai: Chip- 
nuts Technology released on 
July 30 its SmartNX Mobile 
operating system and the 
NX200 handset platform. 

The NX200 is powered by 
Chipnuts' C7280 multicore 



Intel Opens Up Mobile SDK Source Code 



BY P.J. CONNOLLY 

Intel refreshed its Mobile Plat- 
form SDK on July 24, with 
almost no fanfare except for a 
blog posting on the Intel Soft- 
ware Network developer site. 
The release is officially 1.2, but 
the company could have been 
forgiven for calling this a major 
release, given that the entire 
package has been restructured 



as an open source project. 

The updated SDK contains 
more than just a rewrite of the 
previous release, and works 
with C++, Java and .NET code. 
This release adds support for 
Microsoft's Visual Studio 2005 
and .NET Framework 2.0, and 
includes the Intel Mobile Plat- 
form Provider development kit 
for the creation of device- 



specific plug-in modules. 

The new version of the 
mobile SDK now allows linking 
with static as well as dynamically 
loaded C libraries, via the /MT 
and /MTd compiler options. 
It can detect the presence of 
Centrino processors, or CPUs 
that provide the VT virtualiza- 
tion technology. 

Intel Mobile Platform SDK 



1.2 also adds RFID functionali- 
ty, but only at a basic binding 
interface level. The SDK runs 
on Windows XP SP2, and can 
target devices running Windows 
Vista and Windows XP SP2, 
Windows XP Tablet PC Edition, 
Windows Mobile 2003 for Pock- 
et PCs and smartphones, or 
Windows Mobile 5.0 Smart- 
phone Edition. I 



multimedia application proces- 
sor, and is integrated with the 
operating system and the usual 
round of productivity tools, 
including the "Dazhihui" stock 
portfolio tools, instant messag- 
ing and push e-mail, as well as 
less-common features such as 
remote control, a two-way real- 
time conversation recorder, and 
a voice transformer. Chipnuts 
also includes reference design 
and product development tools 
with the NX200 platform. 

The company's avowed goal 
is to advance the Chinese smart- 
phone industry to a point where 
it is globally competitive. CEO 
David Hu noted in a prepared 
statement that the launch "not 
only demonstrates Chipnuts' 
effort and commitment, but also 
strengthens and brings forward 
China's innovative capabilities." 
Chipnuts was established in 
2003, and claims that its tech- 
nology has already shipped in 
more than 10 million handsets. I 
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BY DAVID S. LINTHICUM 



The need to figure out new ways to 
approach testing in the world of 
service-oriented architecture takes 
center stage as SOA deployments 
increase exponentially To test SOA 
in the real world, not much changes, and 
a lot changes at the same time. We don't 
toss out traditional testing approaches, 
techniques and tools, but we need to 
rethink the concepts and technology 
behind SOA and adjust accordingly 

Testing SOAs is a complex, distributed 
computing problem. You need to learn 
how to isolate, check and integrate, assur- 
ing that things work at the service, persis- 
tence and process layers. The foundation 
to SOA testing is to select the right tool 
for the job, have a well-thought-out plan, 
and spare no expense in testing cycles or 
else risk that your SOA will fail. 

Organizations are beginning to roll out 
their first instances of SOA, typically as 
smaller projects. While many work fine, 
some are not living up to expectations due 
to quality issues that could have been pre- 
vented with adequate testing. You need to 
take these lessons, hard-learned by others, 
and make sure that testing is high on your 
priority list when you dive into SOA. 

DEFINING SOA 

First, let me put forth my definition of 
SOA, so we have a foundation. 

In short, a SOA is a strategic frame- 



work of technology that allows all inter- 
ested systems, inside and outside of an 
organization, to expose and access well- 
defined services that may he further- 
more abstracted to orchestration layers 
and composite applications. The prima- 
ry benefits of a SOA are an agile archi- 
tecture that's changeable around 
changes to the core business processes, 
and reuse of services from application to 
application, domain to domain. 

Certainly, this is not the only defini- 
tion; however, it's good enough for our 
discussion of SOA testing. 

SOA allows enterprises to share com- 
mon application services as well as infor- 
mation. This sharing is accomplished 
either by defining application services 
that can be shared and therefore inte- 
grated, or by providing the infrastruc- 
ture for such application-service sharing. 
Application services can be shared 
either by hosting them on a central serv- 
er or by accessing them interapplication 
(for example, through Web services). 

Using the tools and techniques of 
application integration gives us the 
opportunity to learn how to share com- 
mon application services. More than 
that, these tools and techniques create 
the infrastructure that can make such 
sharing a reality. By taking advantage of 
this opportunity, we provide the infra- 
structure for the reuse of business logic 
and application behavior. 

The uses for SOA are endless, includ- 
ing creation of composite applications, or 



applications that aggregate the process- 
es/services and information of many appli- 
cations. For example, using this paradigm, 
application developers simply need to cre- 
ate the interface, and then add the appli- 
cation services by binding the interface to 
as many application services as required. 
However, SOA is not all about service 
sharing; it's also about agility. If you do 
SOA right, you'll have an architecture 
that can change as your business needs 
change. Typically, this is accomplished 
by placing volatile things in their own 
"configurable" domain, such as an 
orchestration layer that allows you to 
alter processes to adjust to a changing 
business, or the ability to mix and match 
services to form a solution. Thus, when 
testing a SOA, you must consider the 
use cases around agility, as well as the 
stability and validity of the underlying 
services and data. 

TESTING A SOA 

So, what's new in the world of SOA as it 
relates to testing? In a word: services. 

At the service deployment stage, we 
focus on testing and early management. 
Do the services work properly? Which 
tools should you use to diagnose prob- 
lems? How should we approach testing 
procedurally? 

Also, what about governance and 
security? Both concepts use new 
approaches with SOA, and have to be 
considered as well. For now, however, 
let's focus on services. Or, what many 



SOA testers call "testing the core." 

While there are no hard and fast 
guidelines on what makes up a well- 
defined and developed service, we do 
know a few things. 

Services are not complete applica- 
tions or systems. They are small parts of 
an application. Nor are they subsystems; 
they are small parts of subsystems as 
well. Indeed, services are more analo- 
gous to traditional application functions 
in terms of design, and how they are 
leveraged to form solutions, fine or 
course. Knowing that, we have a better 
basis of understanding when approach- 
ing the service-testing problem. 

Each service has a specific purpose, 
and they are not complex or naturally 
dependent upon other services. Thus, 
they are easily abstracted into composite 
applications, in essence, leveraging 
these services as if they are functions 
local to the composite. 

Services should exist with a high 
degree of autonomy. They should exe- 
cute without dependencies, if at all pos- 
sible. This allows you to leverage the ser- 
vice by itself, and design the service with 
this in mind, no matter how coarse- or 
fine-grained the service is. 

Considering that, when testing ser- 
continued on page 38 ► 

David S. Linthicum, who writes the 
SOA Watch column for SD Times, is the 
CEO of the Linthicum Group. Reach 
him at david@linthicumgroup.com. 
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< continued from page 37 

vices (for example, Web services, 
Java EE, etc.) you have to think 
about a few things, including 
autonomy, integration, granulari- 
ty, stability and performance, in 



the particular order of your 
requirements. 

You need to check for 
autonomy to determine how 
the service functions on its 
own, including any dependen- 



cies that may be present. This 
is especially important when 
the service will typically be 
leveraged on its own, which 
most are. Most services do 
something right once, and 



that's their contribution to the 
SO A solution. 

Integration testing is 
required to see how the service 
works when leveraged by other 
systems that perhaps are known 
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or unknown at the time of 
development. While you may 
think using Web services stan- 
dards determines compatibility, 
those who deploy services 
already know that nothing is 
certain unless you test it. Dif- 
ferent interpretations of stan- 
dards among different vendors 
can cause integration issues. 

Granularity testing deter- 
mines if the service was created 
with too much of a coarse- or 
fine-grained leaning, which has 
an effect on performance and 
the value of a service. For 
instance, if a service is too fine- 
grained, it could cause perfor- 
mance problems as too many 
fine-grained services are de- 
ployed and yakking across the 
network, or prove not as useful 
if the services are coarse- 
grained. Poorly designed ser- 
vices are the most common 
issues when considering SOA 
performance and scalability. 

Stability testing ensures that 
the services built won't fall down 
at the worst of times. This is usu- 
ally simple regression testing, 
with some integration testing 
here as well. And performance 
testing is just what you would 
expect: the ability to determine 
if the services can handle many 
simultaneous requests, and any 
special architecture that may be 
required to ensure good perfor- 
mance, such as load balancing 
with transactions. 

Performance testing makes 
sure that you test the services 
under increasing loads, ensuring 
that the performance expecta- 
tions of the service, and the ser- 
vice-level agreement, are met. 
This means the services are 
placed inside of a testing con- 
sumer where they are invoked, 
measured, logged and controlled 
during the testing process. 

ALL ABOUT REUSE 

So, now that we know the 
basics, what do you test for 
within services beyond that of 
traditional software testing? 
First, it's important to follow a 
few basic principles. 

First and foremost, services 
should be tested for reuse 
(reusability). Services become 
a part of any number of other 
applications, and thus must be 
tested so they properly provide 
behavior and information, but 
not be application- or technolo- 
gy-specific. This is a difficult 
paradigm for many developers 
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since custom one-off software 
that digs deeply into native fea- 
tures is what they've been 
doing for most of their careers. 
Thus, the patterns must be 
applicable to more than a sin- 
gle problem domain, or appli- 
cation, or standard, meaning 
you must have use for your 
reusable service and it must be 
in good working order. 

To test for reusability you 
must create a list of candidate 
uses for the service. For 
instance, you might have a ship- 



ping service that plugs into 
accounting, inventory and sales 
systems. Then, the service 
should be consumed by the 
client, either through a real 
application (in a testing 
domain) or a simulator, and the 
results noted. 

In addition, the service 
should be tested for hetero- 
geneity. Web services should be 
built and tested so that there are 
no calls to native interfaces or 
platforms. This is due to the fact 
that a service, say, one built on 



Linux, may be leveraged by 
applications running on Win- 
dows, Mac OS and even main- 
frames. Those that leverage 
your service should do so with- 
out regard for how it was 
created, and should be com- 
pletely platform-independent. 
The approach to testing this is 
rather obvious; simply consume 
the service on several different 
platforms, and note any calls to 
the native subsystems. 

You should also test for 
abstraction. Abstraction allows 



A STEP-BY-STEP APPROACH 



So, how do you approach services testing and, 
more holistically, your SOA? It's really a matter of 
breaking down your SOA into its component 
parts, testing each component, doing integration 
testing and then performance/load testing. If this 
sounds like traditional testing approaches, you're 
right. 

Let's take it step by step. 

STEP 1: Creation of a test plan 

The test plan you create for your SOA should 
reflect the reguirements of your project, and 
unfortunately, one size does not fit all. However, 
you may have special needs such as more 
emphasis on performance and security. 

At the end of the day, you'll find that SOA 
testing incorporates all of the testing technolo- 
gy and approaches we've developed over the 
years for other distributed systems, and adds 
some new dimensions such as services, orches- 
tration and governance testing. Those who 
understand testing will have to expand their 
skills and understanding to include those new 
dimensions. Many failed SOA projects are 
directly attributable to lack of testing, with 
many assuming that the new technology would 
work flawlessly. Unfortunately, that's just not 
the real world yet. 

STEP 2: Separation of services into single 
services, and services clusters 

Now that the plan has been created, it's time to 
separate the services into service clusters for 
testing. This means finding common patterns 
among the services, as well as services that are 
designed to work together. While most services 
are designed for autonomy, collections of ser- 
vices are what form solutions. Keep in mind when 
testing services, we are indeed testing them 
independently, but also testing for the way they 
are brought together to form solutions. These 
clusters can be any number of services, but good 
numbers are typically 5-25. 

STEP 3: Service integration testing 

Once your clusters are formed, it time to perform 
integration testing on all service clusters. This 
means using the test use cases you created in 
the test plan to make sure that the services are 
working and playing well together. Typically, this 
is a test of the interfaces and the ability for the 
services to act like a single application. 
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In the world of SOA, services interact with data services 
that in turn interact with the database. Sometimes a 
data abstraction layer is used remap data into groupings 
that are more logical for the SOA. All of these layers 
must be tested as a domain, and holistically. 

STEP 4: Performance and load testing 

As the name implies, and much like traditional 
software testing, now it's time to place a load on 
the SOA, thus the service. Typically this is done 
using performance testing tools that are able to 
exercise the service clusters, and increasing net- 
work and processing loads, noting any changes in 
behavior and stability while under load. 

STEP 5: Security and SOA governance 

Finally (and not discussed very much in this arti- 
cle because we're focusing on the basics), you 
need to test your SOA security and governance 
layers. When testing governance, you're typically 
testing the runtime SOA governance layer, mak- 
ing sure the SOA governance software is able to 
provide directory services for the SOA, enforce 
policy and other operations to ensure that the 
services are allocated to the right consumers, and 
that they do the proper things with them. On the 
security side, you have identity management 
issues to deal with. Is the security software iden- 
tifying consumers of the service, are they validat- 
ed, and is there potential for violations? 

—David S. Lint hie urn 



access to services from multi- 
ple, simultaneous consumers; 
hiding technology details from 
the service developer. The use 
of abstraction is required to get 
around the many protocols, 
data access layers, and even 
security mechanisms that may 
be in place, thus hiding these 
very different technologies 
behind a layer that can emulate 
a single layer of abstraction. 

Abstraction is tested effec- 
tively by doing, which means 
implementing instances and 
then testing the results. Regres- 
sion and integration testing is 
the best approach, from the 
highest to the lowest layers of 
abstraction. 

When we build or design 
services, we need to test for 
aggregation. Many services will 
become parts of other services, 
and thus composite services 
leveraged by an application. 
You must consider this in their 
design. For instance, a cus- 
tomer validation service may be 
part of a customer processing 
service, which is part of the 
inventory control systems. 
Aggregations are clusters of ser- 
vices bound together to create a 
solution, and should be tested 
holistically through integration 
testing procedures. 

BREAKING SERVICES APART 

Services should be white-boxed 
like an application, but they 
should deal with three major 
subsystems: the interface, the 
data and the behavior. This is 
the core of your SOA — the 
resources. 

In the world of SOA, there 
are two types of services: data 
services and transactional ser- 
vices, and each requires a dif- 
ferent approach to testing. 

Data services, as the name 
implies, means that the service 
typically provides data abstrac- 
tion representing a physical 
database or databases, and thus 
is more data-oriented and 
should be tested as such. You 
need to monitor the consump- 
tion of information from the 
physical data stores, the remap- 
ping of the data into the new 
schema, and the new structure 
provided to the other services or 
orchestration layer that is inter- 
acting with the data service. 

Transactional services deal 
with data and are really the 
core services providing applica- 
tion behavior and functionality. 



Thus, while you do need to 
monitor information flowing 
through these services, and the 
changes made to that informa- 
tion, you also need to pay 
attention to the processing, and 
test those features as well. 

Dealing with the interface is 
very similar to dealing with an 
API. While its typically SOAP 
interaction as defined by 
WSDL, in some instances you're 
using REST (Representational 
State Transfer) or proprietary 
enabling technology. The 
approach is the same. It's really 
an input/output interaction, thus 
the programmer needs to build 
in breaks or output calls that dis- 
play the information and para- 
meters as consumed by the ser- 
vice during execution. 

Testing of the data as flow- 
ing through a service is almost 
identical to testing a traditional 
application. Once again, moni- 
toring points are leveraged to 
watch the data as it flows 
through the service. Also, con- 
sider the information the ser- 
vice consumes, with the infor- 
mation the service produces. 

Finally, we need to focus on 
the behavior, or the functionali- 
ty of the service. This means 
that the logic of the service is 
monitored and determined to 
be sound, and that the informa- 
tion flowing into the service is 
processed correctly as to the 
design of the service. Moreover, 
if the service is designed to pro- 
vide different behavior via con- 
text, that needs to be monitored 
throughout the processing of 
the service as well. Same 
approach: Set up monitoring 
points, and watch the behavior 
through execution. 

Testing SOA in the real 
world means understanding 
and integrating new testing 
methodologies to account for 
SOA services, governance and 
security. 

Traditional testing method- 
ologies must still be a part of 
SOA testing, but we cannot lim- 
it our SOA test cycles to these 
traditions. Moreover, we can- 
not allow our thought processes 
and experiences from previous 
test environments to rule our 
actions when we move into 
SOA. The success of your SOA 
project can and likely will 
depend upon how effectively 
you integrate and adjust your 
test cycle for the concepts and 
technology behind SOA. I 
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Don't Give ColdFusion 
The Cold Shoulder 

Some people insist that the World of Web Development can be divid- 
ed into two primary application server platforms: There's Java, and 
there's .NET. 

While this glosses over the many small and niche technologies, it also 
ignores a popular third way: ColdFusion. 

Yes, it's proprietary, and yes, it's been around seemingly forever — since 
1995, to be precise. But while ColdFusion may not have the huge mar- 
ket clout of Microsoft's technologies, or the broad range of app servers 
using Java EE, ColdFusion remains popular, and for good reason. In fact, 
14,000 developers actively participated in the ColdFusion 8 public beta, 
according to Adobe. 

The beta is over; version 8.0 is out. And the prevailing opinion at SD 
Times is that it looks like Adobe has done the right things with it. Here 
is why. 

ColdFusion's ColdFusion Markup Language (CFML) is comparable 
to C#, PHP, Python and JSP and a JavaScript-like language called 
CFScript that supports embedded scripts. CFML was designed with the 
Web in mind and resembles HTML — familiar territory for Web devel- 
opers. CFScript is now more Ecma-compliant. 

ColdFusion 8.0 has a number of crossovers and capabilities that bring 
it up to speed with the "other" Web technologies. For starters, it supports 
the latest versions of Java and Red Hat's JBoss application server. On the 
other side of the hat, it now offers .NET integration. 

Support for AJAX widgets has brought ColdFusion into the Web 2.0 
era. There are debugging features that can be used inside of Adobe's 
Eclipse-based Flex Builder IDE, new integrations with databases and 
Microsoft Exchange, and some image manipulation functions. 

Meanwhile, ColdFusion has received an injection of Adobe's DNA. 
Code updates enable integration with Adobe PDF forms and Macrome- 
dia Breeze presentations. 

While ColdFusion may not be the solution for every organization, we 
are glad to see that people still have a choice, and that there's a third way 
available for Web developers. 

Haven't We Heard This Before? 

During the 1980 presidential debates, Ronald Reagan would stop 
what he perceived as Jimmy Carter's attempts at revising his record 
as president by declaring, "There you go again." 

So we believe it is our duty to say to Microsoft, "There you go again," as 
the company starts talking about a 2010 release date for the next version of 
its flagship desktop operating system, now being called Windows 7. 

To avoid any similar collective amnesia about Microsoft's record, Win- 
dows Vista, under the code name Longhorn, was first discussed in the 
media in 2001, with a target date of 2003. Microsoft made subsequent state- 
ments regarding feature changes to the operating system in 2002 and 2003, 
and then, in 2004, Bill Gates indicated a 2006 release date for Longhorn. It 
didn't actually become commercially available until earlier this year. 

Microsoft "leaked" the information about Windows 7 at its Global 
Exchange conference in late July, perhaps to avoid having to answer 
questions about whether that release date was realistic based on tech- 
nology, or was merely being slipped out to steal some of the thunder 
from future competitive products. Microsoft, after all, loves to get cus- 
tomers talking about what it's going to do next. . .even years in advance. 

For now, Windows 7 is nothing more than talk, and possibly empty 
talk. To expect Microsoft to hit the release date it now has set is pure fol- 
ly. Check back in a couple years, and let's see where they are. In the 
meantime, keep those Windows XP and Windows Vista licenses up to 
date; you'll be using them for a good while longer. I 



Beware the Testability Trap 
And Other Guru (Mis)Guidance 



One of my main motivations for 
speaking at leading conferences, 
like BZ Media's Software Test & Perfor- 
mance Conference, is the opportunity to 
hear what my fellow speakers have to 
say. Many offer valuable information and 
unique individual perspec- 
tives, even keen insights. 

Some of what they say is 
also said by many others and 
frequently may be considered 
conventional wisdom. While 
no doubt well-intentioned and 
often indeed wise, such seem- 
ingly good advice is prone to 
blind acceptance, which I'd 
caution against in general, and 
I'm going to suggest that cer- 
tain specific pieces of guru guidance 
warrant reconsideration from a more 
critical perspective. 

TESTER REVIEW OF REQUIREMENTS 

Within the QA/testing community, two 
such bits of requirements-related con- 
ventional wisdom frequently go hand- 
in-hand. First, testers widely repeat 
and embrace the message that testabil- 
ity is overwhelmingly the issue with 
respect to requirements. A require- 
ment is testable if you can write a test 
case to demonstrate that the require- 
ment has been met, or if you can ascer- 
tain through static review techniques 
that the requirement has been satis- 
fied. If a requirement is not testable, 
it's usually because the requirement is 
not sufficiently clear, which undoubt- 
edly will lead to errors implementing 
the requirement; and regardless, with- 
out testability, there is no way to con- 
firm that the requirement has been 
met correctly. 

Second, and almost equally ubiqui- 
tous, is encouraging testers to get 
involved early in development by 
demanding admission to requirements 
reviews so that the testers can assure 
the requirements are testable. More- 
over, since testers routinely are frus- 
trated and limited in effectiveness by 
not being informed of the require- 
ments at all, or at least not until the 
end of the development process just 
before they must begin test execution, 
speakers further advise testers that an 
additional reason for their attending 
requirements reviews is so they can 
learn what the requirements are in 
order to develop suitable tests before 
receiving the code. 

In fact, at least partly in recognition 
of likely resistance to QA/testing peo- 
ple's active involvement in require- 
ments reviews, some speakers suggest 
seeking admission purely as an observ- 
er just to listen. 



Robin F. Goldsmith 
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CONFERENCE ATTENDEE'S PARADOX 

While I indeed strongly advocate mean- 
ingful QA/testing involvement through- 
out all phases of the development 
process, I fear the "meaningful" part 
tends to be lost in much of the conven- 
tional wisdom advice. 

Consequently, too often 
testers return from a confer- 
ence all revved up to gain 
early access, somehow man- 
age to get into a require- 
ments review, and then blow 
their one bite at the apple by 
convincingly confirming that 
their presence not only is not 
contributing positively but 
may even be a negative 
detractor to the review In such situa- 
tions, Q A/testers can quickly get shown 
the door without knowing what hit 
them. 

Unfortunately, such unsatisfactory 
experiences can be common and pre- 
dictable outcomes of too limited tester- 
centric perspectives. Testers undoubt- 
edly benefit from attending reviews 
even as an observer, but their noncon- 
tributing presence seldom is perceived 
by others as valuable. At best, nonpartic- 
ipating testers may be tolerated as 
superfluous overhead. At worst, they 
may be excluded as an unnecessarily 
wasteful impediment to the review. 

THE TESTABILITY TRAP 

Perhaps more often, testers err on the 
side of inappropriate overparticipation. 
Testability is important, but nontesters 
may not share the concern and often 
consider testers' seemingly incessant 
talk of testability to be annoying trivial 
nitpicking, which can quickly wear out 
the testers' welcome. 

Also, nontesters may be picking up 
unconsciously on other limitations of 
testability of which many testers may 
be unaware. A requirement can be 
testable but wrong, and testability is 
irrelevant for an overlooked require- 
ment. Testability is an issue mainly of 
form, whereas requirements are main- 
ly about content. 

Most requirements reviews tend to 
be far weaker than realized. Partici- 
pants frequently don't adequately know 
what to do, how to do it, or how to tell 
how well they've done. Yet, they rou- 
tinely assume their reviews have caught 
all the key requirements issues! How- 
ever, continued creep and development 
defects largely come from require- 
ments problems the reviewers are 
unaware they missed. 

In contrast to the one or two typical- 
ly weaker-than-realized techniques 
most reviews employ, my book, "Dis- 



www.sdtimes.com 



. Software Development Times . August 15, 2007 



OPINION 



41 



covering REAL Business Require- 
ments for Software Project Success," 
describes more than 21 ways to evalu- 
ate requirements adequacy. Testability 
is just one of those ways and is included 
along with a number of other methods 
to check requirements formats. 

An especially important considera- 
tion is assuring that REAL business 
requirements, which provide value 
when met, have been defined — not just 
product/system/software requirements, 
which are really high-level design of a 
presumed solution that provide value 
if and only if they satisfy the REAL 
business requirements. Both must be 
testable. 

The book and my related seminar 
also list numerous additional specialized 
techniques that need greater subject 
area knowledge to spot overlooked 
requirements and identify requirements 
that are not accurate or complete. These 
are almost entirely REAL business 
requirements issues. In my experience, 
users and managers usually are grateful 
that testers are included in reviews when 
they use these more powerful methods 
to spot wrong and overlooked require- 
ments. Once the testers are recognized 
as providing real value, others even are 
willing to put up with a bit of talk of 
testability. I 

Robin E Goldsmith consults, trains and 
speaks on testing and requirements. 



LETTERS TO THE EDITOR 

Social Responsibility 



Thank you for the synopsis article on the 
Supernova Conference ["The Future Is 
in the Process," July 15, page 5]. If you 
want opinion/feedback for those who 
could not attend, I am offering it. 

I personally believe that marketing 
overshoots the business tech audience. 

I immediately agreed with Irving 
Wladawsky-Berger, chairman emeritus 
of the IBM Academy of Technology. 
There is no way the needs of individual 
businesses are being adequately met by 
tech. I say it is in its infancy. The needs 
are as diverse as the businesses that are 
out there. 

One question that is seldom asked 
aside from any profitability opportunity 
is, "What business sectors could best be 
automated to bring the greatest impact 
for social, family and public concerns?" 

J. M. Welsch 

LINUX PROBLEMS HAVE BEEN IGNORED 

I've been a strong proponent of Linux 
for a number of years, and several of my 
desktops and all of my servers run one of 
various flavors of Linux. I've struggled 
from time to time with some piece of 
software that I needed to download, 
compile and install — always hoping and 
praying that the build instructions would 



Achieving RDI By Outsourcing DATA WATCH 
Is No Slam Dunk 

Although one of the factors driving the outsourcing of application development and main- 
tenance is improving the return on investment, new research from Aberdeen Group indi- 
cates that four major challenges to achieving those improvements exist. A recent survey 
of enterprises found that 92 percent of those guestioned outsourced some or all develop- 
ment work, and although most of them are satisfied with the results, they indicated that 
room exists for improvement. 

The report "Who Outsourced the Outsourcers?" notes that 42 percent of survey 
respondents reported that "project slippage" was the reason ROI fell short of goals, and 
37 percent pointed to the guality of the work delivered. 

Communication challenges also scored high, cited by 40 percent of respondents as a 
problem; almost half of this group indicated that managing the vendor reguired more effort 
and money than planned. 

The report went on to note that when organizations cited one or more of these obsta- 
cles to achieving ROI, at least 1 in 3 (more than 35 percent) indicated language and culture 
gaps between customer and outsourcer. 
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work correctly without some critical 
conflict in a library version. As a result, I 
was intensely interested in the article on 
Linux development standards ["Linux 
Group: Adherence to Standards Base Is 
Critical Issue," July 15, pagel], but I 
think it fell short on talking about the 
entire issue. The real problem goes far 
beyond just KDE versus Gnome; 
beyond the window manager, there are 
issues with kernel versions, library ver- 
sions, missing libraries, distro file system 
structure, etc. 

It seems that problems with develop- 
ment for Linux and a lack of market pene- 
tration by Linux are getting in each other s 
way. Something needs to break the log- 
jam if we're going to make any progress. 

One particular thought that constant- 
ly hits me square on is, why do I need to 
read and follow a set of instructions for 
commands to run at a terminal prompt 
in order to compile, build and install a 
piece of software? 

Since there are enough differences 
from distro to distro to make a single 
binary impossible, I understand why we 
are forced to build the application with 
downloaded source files. But how about 
using the BASH script capability to cre- 
ate an installer tool that could under- 
stand the various differences between 
distros (kernel version, library versions, 
etc.), adjust the build process according- 
ly, and then perform all the steps for the 
user without any need to know anything 
about development tools or terminal 
commands to download and install soft- 
ware? When that happens, Linux will 
begin to make progress against Win- 
dows, and we can all sleep at night again. 

An additional area that can benefit is 
driver installation and configuration. If 
someone can write a set of instructions 
in a text file, then those instructions can 
be turned into a script that performs the 
build, install and config file editing itself. 

Honestly, software installation is one 
area where Windows has stomped all 
over Linux. Until Linux gets serious 
about installation, then I just can't rec- 
ommend customers switch to Linux, 
even though it's OK for me as a techie. 

Gene Amtower 

Owner, PC Backup 

CALL FOR CONTROL 

In my opinion, the lack of access control 
to the standards organization has let 
Microsoft in with their so-called stan- 
dards ["Ecma to Standardize Microsoft 
XPS," www.sdtimes.com/article/Latest- 
News-20070701-21.html]. It is a shame 
and the industry should put a stop to it. 
Fritz Schenk 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 
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Going Big With Ruby 



A few months ago, I discussed a pro- 
ject in which I was forced by circum- 
stances to develop a component "in the 
spinning gears" of an existing, large-scale 
system (www.sdtimes.com/fullcolumn 
/column-20070515-03.html). What I 
didn't mention in that article was that I 
was going to be developing the component 
in Ruby. I chose Ruby for several reasons. 

The most important ability was its 
interactive console, which in a complex 
system allows you to run your committed 
code up to a certain state and then write 
and run code dynamically. An interactive 
console is an amazing tool for working 
with systems that are very variable, as you 
can capture the system's state at a 
moment in time, and then work with 
those variables as if they were essentially 
"frozen." There's a certain tension 
between developing using an interactive 
console and the best practice of unit test- 
ing; tests can, after all, not only bring the 
system to a certain state, they can do so 
reliably and permanently. 

On the other hand, building test scaf- 
folding to recreate a snapshot of an inher- 
ently dynamic system can be very time- 
consuming, and running the tests can 
take a significant amount of time. Since I 
develop inside a virtual machine image, 
with an interactive console I can "freeze" 




the machine in midline and return in the 
morning to the exact same situation. 

The second reason I chose Ruby was 
that it's been my primary language for 
scripting and administrative tasks for 
more than a year now. While I don't have 
a teaching-level knowledge of the lan- 
guage, I'm no longer a tyro and am 
unlikely to find myself wasting 
time wondering how to 
approach a problem. 

Third, Ruby's growing up. 
Although not fully mature 
compared with languages such 
as C# and Java, there now exist I 
some solid Ruby IDEs. I cur- r 
rently prefer Ruby in Steel 
from Sapphire Steel, a plug-in 
for Visual Studio. Even though 
it's fairly common to over- 
whelm the IntelliSense or navigational 
capabilities of Ruby in Steel, the quick 
code navigation, formatting and project 
organization are important to profession- 
al development. 

Obviously, I like Ruby. I recommend it 
without hesitation for administrative tasks 
and small projects. However, as with any 
relationship, there's a difference between 
casual and committed. This was my first 
project approaching what I consider "real 
application" size — rapid development of 
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several thousand lines of code in dozens 
of classes and the inevitable contortions of 
logic and data that define programming in 
the real world. And just as when dating 
there comes a time when you realize 
you're in a relationship with a human and 
not a Platonic ideal, so too there comes a 
time during programming when you real- 
ize that there is no perfect pro- 
gramming language. 

One of the defining fea- 
tures of dynamic languages 
such as Ruby is that type dec- 
larations are not explicit; you 
create a variable or function 
parameter or return variable 
and just "know" that it's a 
number or a string or what- 
have-you. Fans of implicit 
typing often say that type- 
breaking assignments "just don't happen 
too often in the real world." This is 
either a willful lie or these people have 
never dealt with dates and times. I've yet 
to meet a large system that is 100 per- 
cent consistent in the way it represents 
time, and I've met lots of large systems 
that use lots of date and time variables. 
In this system, when I was dealing with 
a service-oriented architecture with 
components from multiple software 
companies, I came to believe that the 




types used were assigned by a Mersenne 
Twister. Call it the Strategy pattern or 
call it a polymorphic function call, but 
the ability to dispatch transparently on 
type is a feature, not a bug. 

Similarly, Ruby's flexibility about 
return types is a trouble-making tempta- 
tion in larger systems. More than once, 
rather than refactoring a complex return 
value into a class, I just returned an array, 
a decision that ought to be labeled "Go to 
debugger. Go directly to debugger. Do 
not pass Go." In general, the lack of 
refactoring support in the IDE was an 
acute pain point compared with develop- 
ing in, say, C# with ReSharper. 

I felt these pain points with only a few 
thousand lines of self-developed code. 
Since most business systems require 
something in excess of 10,000 lines of 
code, even granting Ruby (and other 
dynamic languages) a fractional advan- 
tage in lines of code per function point, I 
think it's fair to expect that these issues 
would only be more serious in a profes- 
sional team environment. Although I 
remain a great fan of Ruby, until the lan- 
guage (or IDEs) can do a significantly 
better job of type inference, I would be 
hesitant to use the language to develop a 
core line-of-business application in a 
team environment. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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Coupling Versus Cohesion 



The notion of coupling versus cohe- 
sion has been around since we began 
to hook up one computer to another. 
While we've debated the trade-offs for 
years, the core concept is one of usage 
patterns and architectural objectives. 

That being said, with the advent of 
SOA and its underlying service design, 
development and deployment, we are 
once again faced with the trade-offs of 
coupling versus cohesion, and once 
again asked to consider each concept in 
the context of the problems at hand. As 
I've been saying, in many respects we 
are solving the same problems as in 
days gone by, but doing so within new 
popular architecture approaches such 
as SOA. 

COUPLING 

Coupling, in the context of SOA, is the 
binding of services together in such a 
way that they are dependent upon each 
other, sharing the same methods, inter- 
faces and perhaps data. While all are 
talking loosely coupled architectures 
these days, the fact of the matter is that 
most services within a SOA are coupled, 
thus interdependent. 

At first glance, coupling may seem 
like the perfect idea when binding ser- 
vices. However, you should not lose sight 



of what it really requires — the tight 
binding of one application or service 
domain to the next. As a consequence of 
this requirement, all coupled producing 
and consuming services will have to be 
extensively changed to couple them (in 
most cases). 

Further, as events and circumstances 
evolve over time, any change 
to any producing or consum- 
ing service demands a corre- 
sponding change to the cou- 
pled services as well. Coupling 
creates one system out of 
many, with each tightly depen- 
dent upon the other. 

In some instances, systems 
are tightly coupled, meaning 
they are dependent upon one 
another. In other instances, 
they are loosely coupled, meaning they 
are more independent. It matters not if 
you're doing this through Web services 
or other mechanisms; you will typically 
need to make these architectural trade- 
offs within the notion of coupling. 

There are, of course, more pros and 
cons of coupling that should be consid- 
ered in the context of the problem you're 
looking to solve. 

On the pro side you have: 
• The ability to bind systems by sharing 
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behavior and bound data, versus simply 
sharing information. This provides the 
SOA with the ability to share services 
and thus reduce development costs. 
This is the reason we leverage SOA. 

• The ability to tightly couple processes 
as well as shared behavior. This means 
that process integration engines (for 

example, BPEL) layered on 
top of services have a better 
ability to bind actual behavior 
(functions) versus simply 
moving information from 
place to place. 

On the con side you have: 
• The need, in many cases, to 
change producing and con- 
suming systems to couple ser- 
vices. This adds cost because 
development and testing time 
is involved. It's no longer a matter of 
leveraging an interface that is abstracted 
from the core system; you have to treat 
coupled systems as single monolithic 
systems, even though they are just a col- 
lection of coupled services. 

• The fact that coupled systems could 
cease to function if one or more of the 
coupled systems/services go down. This 
means that a single system failure could 
bring down all coupled systems/services, 
and thus creates vulnerability. 



COHESION 

In contrast to coupling, cohesion is the 
"act or state of sticking together" or 
"the logical agreement." Cohesively 
integrated producing and consuming 
services are independent of one anoth- 
er. Changes to any producing or con- 
suming services should not affect the 
others directly. In this scenario, infor- 
mation can be shared between services 
without worrying about changes to the 
applications or databases, leveraging 
some type of loosely coupled middle- 
ware layer to move information 
between services and make adjust- 
ments for differences in application 
semantics using a transformation layer 
(for example, XSLT). 

The advantages of using cohesion 
within a SOA include: 

• The ability to avoid changes to consum- 
ing and producing services just to facili- 
tate integration. You no longer have to 
make changes to the services because the 
patterns of integration are less invasive. 

• The fact that a single system failure 
won't bring down all connected systems. 

The disadvantages include: 

• The inability to provide visibility into 
the services layer, and thus gain value 
from encapsulated business services and 
tactical functions. I 

David S. Linthicum is the CEO of the 
Linthicum Group. Reach him at 
david@linthicumgroup.com. 
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ill the GPL Remain Relevant? 




At last, version 3 of the GPL is offi- 
cial. The debate leading up to it 
seemed far greater in its intensity than 
the subject matter warranted. There are 
plenty of good alternatives to the GPL, 
so its specific provisions no longer have 
the impact they once did. The real fight- 
ing, I think, should be among the mem- 
bers of a project who have to decide 
whether to migrate to GPLv3. Likely, 
the majority of those discussions will 
arise among existing GPLv2 adopters. I 
think that debate should look at more 
than GPLv3 migration, and consider the 
alternative license options. 

But before that, let me take one step 
back. The choice of any license is an 
attempt, however minor, to retain some 
control over use of the software. If no 
control were sought, the product would 
be placed in the public domain. Alas, 
placing a work in the public domain now 
requires an intentional act, because 
since 1978 all published works in the 
United States are automatically accord- 
ed copyright protection. I am intrigued 
by how rarely the public domain option 
is used, even by developers who have no 
interest in retaining rights to their work. 
I think this is in part due to the inaccu- 
rate perception that someone could take 
over their work and claim it as their own. 



This is not the case. The original author 
remains the original author. The Cre- 
ative Commons is one of the leading 
groups seeking to encourage authors 
and developers to put their works in the 
public domain. By so doing, as I pointed 
out earlier, they allow the maximum 
freedom for the product's usage. 

Any license limits these 
rights. Some licenses such as 
the MIT license and the new 
BSD license impose minimal 
constraints. They uphold 
copyright, and they require a 
copyright notice that includes 
a disclaimer of warranties. 
BSD adds a clause that the 
copyright holders do not 
endorse derivative works 
(which is a curious stipula- 
tion — what incident inspired that?). 
Because these licenses are one step 
removed from public domain, they are 
generally considered "permissive" and 
are acceptable to nearly everyone not 
worried about assuring that derived 
works are kept free and open. 

Then come a spate of licenses with 
varying terms: the Apache and Mozilla 
licenses, the Eclipse license and vari- 
ants of the Creative Commons licenses. 
These all have terms that are somewhat 
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more restrictive than the previous 
licenses but are still liberal in what they 
allow. They are remarkably subject to 
misunderstanding. One of my compa- 
ny's clients at the moment is a group of 
authors of a free and open source prod- 
uct who are considering providing sup- 
port for pay. Their product uses the 
Mozilla license. A frequent 
request they receive is how 
to opt out of the Mozilla 
license because the prospec- 
tive user's attorneys will not 
accept it. Inquiries as to 
what is objectionable in the 
Mozilla license result in the 
same answer: No one really 
knows. The Apache license 
has similar nonspecific 
detractors. Perhaps this is 
due to the complexity and length of 
both licenses. Complexity invariably 
invites legal objection. 

The most complex and, I think, least 
free of the major licenses is the GPL; 
and GPLv3 pushes these aspects into 
new territory. I don't mean this as a cri- 
tique, but rather a reflection that the 
GPL represents the view of a group of 
advocates who have specific goals in 
mind and seek those goals through the 
licensing terms. Specifically, they want 



to assure that contributed code is never 
made unavailable, even in derivative 
works. I don't begrudge this spirit at all. 

However, GPLv3, like previous ver- 
sions, does present a paradox that many 
companies have ridden for a while that 
seems at cross purposes with the FSF's 
goals: The terms create opportunities for 
dual licensing. It says to corporate inter- 
ests: "Here are terms you probably won't 
like. I'll give you better terms for pay- 
ment." And so, because of the restric- 
tions that seek to promote free usage, 
commercial for-pay deals arise. This 
aspect received scant attention during 
the arguments regarding GPLv3, which 
most surprised me, as it should be part 
of the discussion about what constitutes 
"free" software. 

What did appear in the debates was 
the frequent reminder that the FSF, and 
Richard Stallman in particular, do not 
speak for the open source community. 
(He has never claimed to, I might add.) 
It's becoming clear that many OSS writ- 
ers are interested in making code widely 
available and not in using the license to 
hammer an agenda. How much this sen- 
timent affects adoption of GPLv3 will 
determine whether this revision has 
over-reached or not and what its role will 
be in a fast-changing industry. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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IBM, it appears, is getting real about 
real time. 

Its June announcement of its inten- 
tion to acquire Telelogic, when complet- 
ed, will give IBM a strong foothold in 
the automotive, aerospace, defense, 
medical and telecommunications in- 
dustries. Its July announcement of its 
intention to acquire DataMirror, when 
completed, will ensure that 
information gained from 
those traditionally closed sys- 
tems can be used in a number 
of different ways. 

And IBM can now go into 
those customers to show them 
how to merge their embedded 
systems data into other enter- 
prise IT systems, according to 
Voke principal analyst Theresa 
Lanowitz. 

Say you're an insurance adjuster look- 
ing at a vehicle that has suffered damage 
in a crash. Currently, you need a Tablet 
PC or a handheld device, which must be 
synchronized with a main system, and the 
data must then be downloaded. There is 
no ability to track anything else. 

But maybe you, the adjuster, have four 
calls that day, and you need to keep track 
of your hours worked. With real-time 
data integration, you can get the names of 
the vehicle owners and the location of the 
vehicle, and tie into the human resources 
system for hours worked. 



* 




"In the past, data coming out of these 
disparate systems could not be used in 
other ways," Lanowitz said. 

There are potential downsides for 
putting real-time technology into prac- 
tice. For example, in late July, New York 
City taxi drivers began a series of protests 
that could result in a September strike 
over the push to mandate the installation 
of a GPS system in each car. 
This, of course, would help 
dispatchers locate cabs for 
customers, monitor trip 
lengths, and return forgotten 
items to riders. 

The drivers, though, be- 
lieve the GPS systems will be 
used to track their where- 
abouts. One cabbie said he 
would feel like a dog on a leash 
if tied into dispatch via GPS. 
The city's Taxi and Limousine Com- 
mission has vowed it is not using the 
technology to track riders, that it is only 
capturing data from an electronic trip 
sheet, which is similar to the ride sheets 
drivers have been filling out on paper for 
decades. When the cabs are off-duty, a 
spokesperson has said, the systems will 
not be feeding data to TLC. 

Beyond personnel matters, though, 
few can dispute the advantages of being 
able to gather information in real time 
and use that data with other systems. 
Think of how an automobile dealer can 



fine-tune its service message to cus- 
tomers. Instead of simply sending a 
postcard reminding of a service at, say, 
15,000 miles, the dealer could notify the 
driver that his brake pads are wearing 
unevenly — based on real-time diagnos- 
tics gathered from the car — and that an 
inspection is needed now. 

By acquiring Telelogic's Rhapsody, a 
popular modeling tool for software run- 
ning on embedded systems, and 
DOORS, a very technical requirements 
tool, IBM can implement a product 
strategy that recognizes the convergence 
of multiple, disparate systems. The 
DataMirror purchase will allow IBM to 
move data across those systems in real 
time, making it a powerful player in the 
mission-critical software space. 

Lanowitz noted that the small com- 
panies that now offer tools for testing 
software running on hardware won't be 
able to compete with IBM, which has 
said it will tie the real-time tools into the 
Rational suite, or HP, with the Mercury 
line of testing tools. 

IBM plans on being there when the 
worlds of embedded, closed systems and 
enterprise back-end systems converge. 
But with a real-time component being 
built into the Java specification, it cer- 
tainly won't be there alone. The real- 
world requirement of data that can be 
used and acted on by multiple depart- 
ments in a company, or by multiple com- 
panies in an industry, will make it so. I 

David Rubinstein is editor-in-chief of 
SD Times. 
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SUN SHOWS SUCCESSFUL YEAR 

Sun Microsystems reported its results for fiscal-year 2007 on 
July 30. Those results showed US$13.87 billion in revenue for the 
year, with $3.83 billion of that coming in the just-finished Q4. Net 
income for Sun was up slightly over Q4 2006, with a downturn of 
almost $30 million in product sales made up for by an almost $40 
million gain in services-generated income. CEO Jonathan 
Schwartz used this opportunity to release Sun's financial infor- 
mation on the company's Web site first, then to follow up with a 
conference call after the public release. Schwartz had been pub- 
licly communicating with SEC chairman Christopher Cox about 
such a move, the first of its kind. 

OTHER NEWS: IBM announced an agreement to acquire 
Markham, Ontario-based DataMirror on July 16. IBM will spend 
CAN$170 million (approximately US$161 million) to acquire all of 
the outstanding DataMirror common shares, at a price of 
CAN$27.00 per share. The transaction is subject to regulatory 
approvals. DataMirror produces software that identifies and cap- 
tures data that has been added, deleted or updated, and allows the 
changed data to be delivered to processes, applications and data- 
bases in real time . . . Cisco Systems will invest US$150 million in 
VMware's Class A common shares from VMware's parent company 
EMC Corp. Cisco will own approximately 1.6 percent of VMware's 
common stock, after closing and regulatory reviews are satisfied. 
VMware has agreed to consider appointing a Cisco executive to its 
board of directors. Cisco took an equity stake in VMware to accel- 
erate customer adoption of VMware virtualization products with its 
networking infrastructure products, and to develop customer solu- 
tions that address the intersection of virtualization with network- 



ing technologies . . . Talend, an open source data integration soft- 
ware company, has secured US$3.5 million in Series B financing 
from Galileo Partners. Galileo Partners is an independent venture 
capital fund and Talend's historical financial partner. Talend will use 
the funding to finance additional product development, an expan- 
sion of its global operations, and sales and marketing programs. 

EARNINGS: ILOG closed its fiscal fourth quarter with US$46.2 
million in revenues and a net income of $2.5 million, compared with 
$34.4 million and $1.8 million in 2006. Its fiscal 2007 revenues 
totaled $161.5 million, a 21 percent increase over the past year. Ful- 
ly diluted earnings per share rose 5 cents from last year. The rev- 
enue growth is attributed to the company's recent acquisition of 
LogicTools and steady growth in the Business Rule Management 
space . . . Apple achieved the highest revenue and profit in its his- 
tory, in its fiscal 2007 third quarter ended June 30. The company 
posted revenue of US$5.41 billion and net quarterly profit of $818 
million, earning shareholders 92 cents per diluted share. Revenue 
was $4.37 billion and net quarterly profit was $474 million for the 
same period last year. Apple shipped a record 1,764,000 Macintosh 
computers— 33 percent growth over the year-ago quarter. During 
the quarter, 9,815,000 iPods were sold, representing a 21 percent 
growth . . . Microsoft's annual revenue surpassed US$50 billion 
after it reported $13.37 billion in revenue for the quarter ended 
June 30. Although its revenues grew by 13 percent over the same 
period of the prior year, a $1 billion charge related to Xbox 360 war- 
ranty policies reduced diluted earnings per share by 8 cents to 31 
cents. Microsoft credits the general availability of its flagship prod- 
ucts, Windows Vista and the 2007 Office System, for the majority 
of its sales growth. I 



EVENTS CALENDAR 



Serena xChange Sept. 9-12 

Global User Conference 

Chicago 

SERENA SOFTWARE 

www.serenainternational.com/News/usergroups.asp 



BEAWorld 

San Francisco 
BEA SOFTWARE 

www.bea.com/beaworld 



Sept. 10-12 



VMworld 2007 

San Francisco 
VMWARE 

www.vmware.com/vmworld 



Sept. 11-13 



VSLive Sept. 16-19 

New York 
1105 MEDIA 

www.ftponline.com/conferences/vslive 

Dreamforce 2007 Sept. 16-19 

San Francisco 
SALESF0RCE.COM 

www.salesforce.com/dreamforce 



High Performance 
on Wall St. 

New York 

FLAGG MANAGEMENT 

www.highperformanceonwallstreet.com 



Sept. 17 



Intel Developer Forum 


Sept. 18-20 


San Francisco 




INTEL 




www.intel.com/idf/us/fall2007 




SD Best Practices 


Sept. 18-21 


Boston 




CMP MEDIA 




www.sdexpo.com 





Embedded Systems 
Conference 

Boston 
CMP MEDIA 

www.embedded.com/esc/boston 



Sept. 18-21 



AJAX World 

Santa Clara 
SYS-C0N MEDIA 

www.ajaxworld.com 



Sept. 23-26 



TechExcel Users 
Conference 

Millbrae, Calif. 
TECHEXCEL 

www.techexcel.com/conference 



Oct. 1-5 



Software Business 2007 Oct. 2-3 

Santa Clara 

WEBC0M COMMUNICATIONS 

www.softwarebusinessonline.com/sb_conf07_index.htm 



Software Test 

& Performance Conference 

Cambridge, Mass. 
BZ MEDIA 

www.stpcon.com 



Oct. 2-4 



Mobile Web Americas 


Oct. 2-4 


Orlando, Fla. 




BLACK MARLIN MULTIMEDIA GROUP 




www.mobilewebexpo.com 




Online Market World 


Oct. 3-5 


San Francisco 




THE CHASE GROUP 




www.onlinemarketworld.com 




EclipseWorld 


Nov. 6-8 


Reston, Va. 




BZ MEDIA 




www.eclipseworld.net 





For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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